Skip to content

deps: bump the npm-minor-and-patch group with 31 updates - #11

Merged
aniruddhaadak80 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-e1512419db
Nov 10, 2026
Merged

deps: bump the npm-minor-and-patch group with 31 updates#11
aniruddhaadak80 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-e1512419db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 31 updates:

Package From To
@imagemagick/magick-wasm 0.0.45 0.0.46
@neslinesli93/qpdf-wasm 0.3.0 0.3.1
@tiptap/core 3.32.1 3.33.0
@tiptap/extension-text-align 3.32.1 3.33.0
@tiptap/pm 3.32.1 3.33.0
@tiptap/starter-kit 3.32.1 3.33.0
bson 7.3.3 7.3.4
cbor-x 1.6.8 1.6.9
docx 9.15.0 9.15.2
fast-xml-parser 5.11.2 5.12.0
framer-motion 14.8.0 14.9.1
hyparquet-compressors 1.1.2 1.1.3
jose 6.2.14 6.2.15
jsonpath-plus 11.2.2 11.3.0
lucide-react 1.64.0 1.69.0
marked 18.1.2 18.1.3
mermaid 12.2.0 12.3.0
music-metadata 12.3.2 12.3.5
node-forge 1.4.2 1.4.3
otpauth 9.5.2 9.6.0
oui-data 2.1.49 2.1.53
pdfjs-dist 6.4.299 6.5.438
three 0.186.1 0.187.0
@types/three 0.186.0 0.187.0
turndown 7.2.4 7.2.5
@playwright/test 1.64.1 1.65.0
@tailwindcss/vite 4.3.3 4.3.4
@vitejs/plugin-react 6.1.2 6.2.1
oxlint 1.90.0 1.91.0
tailwindcss 4.3.3 4.3.4
vite 8.3.5 8.3.6

Updates @imagemagick/magick-wasm from 0.0.45 to 0.0.46

Release notes

Sourced from @​imagemagick/magick-wasm's releases.

0.0.46

Changes in magick-wasm:

  • Added colorMatrix, convolve, decipher, despeckle, edge, encipher, equalize, frame, fx, haldClut, houghLine, implode, integral, kmeans, kuwahara, lower, magnify, meanShift, medianFilter, minify, otheredDither, polaroid, posterize, raise, rangeThreshold, reduceNoise, resample, rotationalBlur, sample, scale, segment, selectiveBlur, shade, shadeGrayscale, shear, sketch, spread, stegano, stereo, swirl, tint, transpose, transverse, uniqueColors, unsharpMask and waveletDenoise to the MagickImage.
  • Added interfaces for ChromaticityInfo, ConnectedComponent, MagickErrorInfo, PrimaryInfo and TypeMetric
  • Added overload to evaluate with EvaluateFunction.

Library updates:

  • ImageMagick 7.1.2-35 (2026-10-31)
  • aom 3.15.2 (2026-10-09)
  • brotli 1.2.1 (2026-10-21)
  • freetype 2.15.0 (2026-10-11)
  • heif 1.23.7 (2026-10-26)
  • jpeg-turbo 3.2.1 (2026-10-27)
  • raw 0.22.3 (2026-10-26)

Full Changelog: dlemstra/magick-wasm@0.0.45...0.0.46

Commits
  • 137a421 Published magick-wasm 0.0.46.
  • 1144604 Updated unit tests due to changes in ImageMagick.
  • 54a1608 Added channel argument to bilateralBlur, motionBlur and normalize.
  • af5db57 Updated Magick.Native.
  • f3a9d70 Updated packages.
  • d67c2d4 Added extra test.
  • c1c5f8b Added fx to MagickImage.
  • 852a11d Added tint to MagickImage.
  • cc6f829 Changed messages in custom-matcher.
  • 6c57c1a Added swirl to MagickImage.
  • Additional commits viewable in compare view

Updates @neslinesli93/qpdf-wasm from 0.3.0 to 0.3.1

Release notes

Sourced from @​neslinesli93/qpdf-wasm's releases.

0.3.1

What's Changed

Full Changelog: neslinesli93/qpdf-wasm@0.3.0...0.3.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​neslinesli93/qpdf-wasm since your current version.


Updates @tiptap/core from 3.32.1 to 3.33.0

Release notes

Sourced from @​tiptap/core's releases.

v3.33.0

@​tiptap/extension-collaboration

Minor Changes

  • With enableContentCheck: true, shared content that does not fit the editor schema now emits contentError instead of being deleted. The editor pauses editing and sends no changes until compatible content arrives, so read-only users no longer send repairs that the server rejects.

    If you use enableContentCheck with collaboration and want the editor to keep repairing invalid content, turn the content check off.

@​tiptap/y-tiptap

Minor Changes

  • Add the onInvalidContent sync option. When it is set, shared content that does not fit the editor schema stays in the shared document instead of being deleted. The editor shows what it can, pauses editing and sends no changes until compatible content arrives.

v3.32.3

@​tiptap/core

Patch Changes

  • Clearing formatting on a nested list now turns every level into paragraphs, and clearNodes() works in a chain with other node commands.
  • Stop removed resizable node views from responding to later editor updates.

@​tiptap/extension-bubble-menu

Patch Changes

  • Bubble menus now update correctly after IME input, including Korean text

@​tiptap/extension-code-block-lowlight

Patch Changes

  • Fixed a performance issue where code highlighting updates were unnecessarily triggered by selection-only changes

@​tiptap/extension-floating-menu

Patch Changes

  • Floating menus now update correctly after IME input, including Korean text

@​tiptap/extension-link

Patch Changes

  • Pasting a link without a protocol now uses the defaultProtocol option instead of always falling back to http.

@​tiptap/extensions

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.33.0

No changes in this release.

3.32.3

Patch Changes

  • bbe4d6e: Clearing formatting on a nested list now turns every level into paragraphs, and clearNodes() works in a chain with other node commands.
  • 88892f9: Stop removed resizable node views from responding to later editor updates.

3.32.2

Patch Changes

  • @​tiptap/pm@​3.32.2
Commits

Updates @tiptap/extension-text-align from 3.32.1 to 3.33.0

Release notes

Sourced from @​tiptap/extension-text-align's releases.

v3.33.0

@​tiptap/extension-collaboration

Minor Changes

  • With enableContentCheck: true, shared content that does not fit the editor schema now emits contentError instead of being deleted. The editor pauses editing and sends no changes until compatible content arrives, so read-only users no longer send repairs that the server rejects.

    If you use enableContentCheck with collaboration and want the editor to keep repairing invalid content, turn the content check off.

@​tiptap/y-tiptap

Minor Changes

  • Add the onInvalidContent sync option. When it is set, shared content that does not fit the editor schema stays in the shared document instead of being deleted. The editor shows what it can, pauses editing and sends no changes until compatible content arrives.

v3.32.3

@​tiptap/core

Patch Changes

  • Clearing formatting on a nested list now turns every level into paragraphs, and clearNodes() works in a chain with other node commands.
  • Stop removed resizable node views from responding to later editor updates.

@​tiptap/extension-bubble-menu

Patch Changes

  • Bubble menus now update correctly after IME input, including Korean text

@​tiptap/extension-code-block-lowlight

Patch Changes

  • Fixed a performance issue where code highlighting updates were unnecessarily triggered by selection-only changes

@​tiptap/extension-floating-menu

Patch Changes

  • Floating menus now update correctly after IME input, including Korean text

@​tiptap/extension-link

Patch Changes

  • Pasting a link without a protocol now uses the defaultProtocol option instead of always falling back to http.

@​tiptap/extensions

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-text-align's changelog.

3.33.0

No changes in this release.

3.32.3

No changes in this release.

3.32.2

Patch Changes

  • @​tiptap/core@​3.32.2
Commits

Updates @tiptap/pm from 3.32.1 to 3.33.0

Release notes

Sourced from @​tiptap/pm's releases.

v3.33.0

@​tiptap/extension-collaboration

Minor Changes

  • With enableContentCheck: true, shared content that does not fit the editor schema now emits contentError instead of being deleted. The editor pauses editing and sends no changes until compatible content arrives, so read-only users no longer send repairs that the server rejects.

    If you use enableContentCheck with collaboration and want the editor to keep repairing invalid content, turn the content check off.

@​tiptap/y-tiptap

Minor Changes

  • Add the onInvalidContent sync option. When it is set, shared content that does not fit the editor schema stays in the shared document instead of being deleted. The editor shows what it can, pauses editing and sends no changes until compatible content arrives.

v3.32.3

@​tiptap/core

Patch Changes

  • Clearing formatting on a nested list now turns every level into paragraphs, and clearNodes() works in a chain with other node commands.
  • Stop removed resizable node views from responding to later editor updates.

@​tiptap/extension-bubble-menu

Patch Changes

  • Bubble menus now update correctly after IME input, including Korean text

@​tiptap/extension-code-block-lowlight

Patch Changes

  • Fixed a performance issue where code highlighting updates were unnecessarily triggered by selection-only changes

@​tiptap/extension-floating-menu

Patch Changes

  • Floating menus now update correctly after IME input, including Korean text

@​tiptap/extension-link

Patch Changes

  • Pasting a link without a protocol now uses the defaultProtocol option instead of always falling back to http.

@​tiptap/extensions

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/pm's changelog.

3.33.0

No changes in this release.

3.32.3

No changes in this release.

3.32.2

No changes in this release.

Commits

Updates @tiptap/starter-kit from 3.32.1 to 3.33.0

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.33.0

@​tiptap/extension-collaboration

Minor Changes

  • With enableContentCheck: true, shared content that does not fit the editor schema now emits contentError instead of being deleted. The editor pauses editing and sends no changes until compatible content arrives, so read-only users no longer send repairs that the server rejects.

    If you use enableContentCheck with collaboration and want the editor to keep repairing invalid content, turn the content check off.

@​tiptap/y-tiptap

Minor Changes

  • Add the onInvalidContent sync option. When it is set, shared content that does not fit the editor schema stays in the shared document instead of being deleted. The editor shows what it can, pauses editing and sends no changes until compatible content arrives.

v3.32.3

@​tiptap/core

Patch Changes

  • Clearing formatting on a nested list now turns every level into paragraphs, and clearNodes() works in a chain with other node commands.
  • Stop removed resizable node views from responding to later editor updates.

@​tiptap/extension-bubble-menu

Patch Changes

  • Bubble menus now update correctly after IME input, including Korean text

@​tiptap/extension-code-block-lowlight

Patch Changes

  • Fixed a performance issue where code highlighting updates were unnecessarily triggered by selection-only changes

@​tiptap/extension-floating-menu

Patch Changes

  • Floating menus now update correctly after IME input, including Korean text

@​tiptap/extension-link

Patch Changes

  • Pasting a link without a protocol now uses the defaultProtocol option instead of always falling back to http.

@​tiptap/extensions

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.33.0

No changes in this release.

3.32.3

No changes in this release.

3.32.2

Patch Changes

  • @​tiptap/extension-dropcursor@​3.32.2
    • @​tiptap/extension-gapcursor@​3.32.2
    • @​tiptap/extension-list-item@​3.32.2
    • @​tiptap/extension-list-keymap@​3.32.2
    • @​tiptap/core@​3.32.2
    • @​tiptap/extension-blockquote@​3.32.2
    • @​tiptap/extension-bold@​3.32.2
    • @​tiptap/extension-bullet-list@​3.32.2
    • @​tiptap/extension-code@​3.32.2
    • @​tiptap/extension-code-block@​3.32.2
    • @​tiptap/extension-document@​3.32.2
    • @​tiptap/extension-hard-break@​3.32.2
    • @​tiptap/extension-heading@​3.32.2
    • @​tiptap/extension-horizontal-rule@​3.32.2
    • @​tiptap/extension-italic@​3.32.2
    • @​tiptap/extension-link@​3.32.2
    • @​tiptap/extension-list@​3.32.2
    • @​tiptap/extension-ordered-list@​3.32.2
    • @​tiptap/extension-paragraph@​3.32.2
    • @​tiptap/extension-strike@​3.32.2
    • @​tiptap/extension-text@​3.32.2
    • @​tiptap/extension-underline@​3.32.2
    • @​tiptap/extensions@​3.32.2
    • @​tiptap/pm@​3.32.2
Commits

Updates bson from 7.3.3 to 7.3.4

Release notes

Sourced from bson's releases.

v7.3.4

7.3.4 (2026-11-05)

The MongoDB Node.js team is pleased to announce version 7.3.4 of the bson package!

Release Notes

BSON.onDemand.parseToElements no longer hangs on malformed input

A malformed document containing a string element with a declared length of zero previously caused a non-terminating scan (synchronous CPU hang). The experimental on-demand parser now throws a BSONOffsetError instead.

Thanks to @​AbinMadathil07 for providing the fix!

calculateObjectSize() now returns the correct size for negative zero

Previously, calculateObjectSize() counted -0 as a 4-byte int32, but serialize() writes it as an 8-byte double so the sign is kept. This made the result 4 bytes too small for every -0 in a document. Serializing into a buffer sized from that result (for example with serializeWithBufferAndIndex) would throw an out-of-bounds error. Thanks to @​spokodev for the fix!

calculateObjectSize() now returns the correct size for a Code with an empty scope

Previously, calculateObjectSize() counted a Code whose scope is an empty object (for example new Code('x', {})) as plain code, but serialize() writes it as code with scope. The result was 9 bytes too small for each such value. Serializing into a buffer sized from that result (for example with serializeWithBufferAndIndex) would throw an out-of-bounds error. The two functions now agree. Thanks to @​spokodev for the fix!

ObjectId no longer throws at import-time

Guards against throws at import-time in the Next.js Edge & Bun runtimes, which occur when the static ObjectId initializer calls specific optional APIs: getBuiltinModule and isBuildingSnapshot, which are implemented with a throwing stub.

Bug Fixes

  • NODE-7611: bounds check findNull scan in on-demand parser (#924) (12ed533)
  • NODE-7652: count negative zero as a double in calculateObjectSize (#908) (58d34bd)
  • NODE-7661: count empty-scope Code as code_with_scope in calculateObjectSize (#911) (e0d0bd5)
  • NODE-7784: try..catch wrapper around snapshot fn calls in static ObjectID initializer (#936) (5a9d5fc)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.4 (2026-11-05)

Bug Fixes

  • NODE-7611: bounds check findNull scan in on-demand parser (#924) (12ed533)
  • NODE-7652: count negative zero as a double in calculateObjectSize (#908) (58d34bd)
  • NODE-7661: count empty-scope Code as code_with_scope in calculateObjectSize (#911) (e0d0bd5)
  • NODE-7784: try..catch wrapper around snapshot fn calls in static ObjectID initializer (#936) (5a9d5fc)
Commits
  • 332ff9b chore(main): release 7.3.4 (#938)
  • 25312c2 ci: pin node v26 in ci (#961)
  • 32b02ab chore(deps-dev): bump @​humanfs/node from 0.16.6 to 0.16.8 (#930)
  • c37d192 chore(deps-dev): bump browserslist from 4.28.0 to 4.28.8 (#932)
  • 3dd9b25 chore(deps): bump fast-uri from 3.1.8 to 3.1.9 (#957)
  • f438a44 chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 (#935)
  • 2bc548a chore(deps): bump fast-uri from 3.1.6 to 3.1.8 (#939)
  • e51146f chore(NODE-7896): bump brace-expansion from 1.1.18 to 1.1.21 (#943)
  • e96bf27 refactor(NODE-7872): simplify check for null in findNull (#940)
  • e0d0bd5 fix(NODE-7661): count empty-scope Code as code_with_scope in calculateObjectS...
  • Additional commits viewable in compare view

Updates cbor-x from 1.6.8 to 1.6.9

Commits
  • e1d4a0a 1.6.9
  • 4df11dd Fix truncated shared-structure blobs stalling DecoderStream, and port three m...
  • 7c4fc1b Reject break stop code outside of an indefinite-length item (#136)
  • 3da5100 Fix decode failure for objects with >= 65536 keys (fixed-map size overflow) (...
  • 96ec763 Merge pull request #145 from Rayan-and-beyond/fix-int64-number-negative-143
  • af5e88b Preserve state throughout reentrant decodeMultiple calls (#159)
  • f63e2e5 Restore packed tables after nested decode calls (#158)
  • 7040992 Make fragmented stream decoding linear with a resumable scan (#160)
  • b6fec71 Cap incomplete DecoderStream/decodeIter input, stop re-decoding it on every c...
  • d67e6cb fix: decode negative int64 values as numbers
  • See full diff in compare view

Updates docx from 9.15.0 to 9.15.2

Release notes

Sourced from docx's releases.

9.15.2 fixes the published types and clarifies a packer option in the docs. Since 9.13.0, the types carried a declaration from one of docx's own tests that added glob to import.meta in every project that installed docx, so projects that declare import.meta.glob themselves, such as Next.js 16.4 apps, failed to type-check with TS2300: Duplicate identifier 'glob'. The types no longer change any global (#3879). The docs now say which values the packers' prettify argument takes.

What's Changed

New Contributors

Full Changelog: dolanmiu/docx@9.15.1...9.15.2

9.15.1 adds guides for questions raised in issues, and fixes image names, placeholders that patchDocument skipped, and text boxes in WPS Office. The docs now show how to style a list's numbers and bullets (#2328), number a list in legal style, for 1.1 under a level in Chinese counting (#3425), put space between images in a paragraph (#3021), and put a full-page background image behind the text without the header pushing the text down (#2349). They explain that a table row of exact height never splits across pages (#1615), that a table goes next to paragraphs and never in a paragraph's children (#2711), and how a hanging paragraph's left differs from the Left that Word's Paragraph dialog shows (#2448). The checkbox options now give their real type, their defaults and what alias does (#3007), createMathAccentCharacter is described as an n-ary operator's character, with a pointer to MathAccent for accents (#2511), and the README's browser example now uses the current docx rather than playgrounds on docx 7.1.0 (#2853). On the fixes side, images are now written to the package as image1.png, image2.jpg and so on, as Word names them, rather than under a hash of their data, which Word for the web showed as an empty box (#496). patchDocument and patchDetector now find placeholders in a link's text, in a content control and in text typed with Track Changes on, which they used to skip without an error (#2679). A text box of auto height is now written 1in tall, so WPS Office fits it to its text (#3171), and ImportedXmlComponent.fromXmlString no longer wraps its XML in an <undefined> element (#3862).

What's Changed

Full Changelog: dolanmiu/docx@9.15.0...9.15.1

Commits
  • aa47895 chore: Version bump to 9.15.2 (#3883)
  • a986bd6 fix: keep spec files' global declarations out of the published types (#3880)
  • 5639a7f build(deps-dev): bump glob from 13.0.6 to 14.0.3 (#3878)
  • dcd8765 build(deps-dev): bump eslint from 10.13.0 to 10.14.0 (#3881)
  • 7833f0d build(deps-dev): bump @​microsoft/api-extractor from 7.60.0 to 7.60.1 (#3882)
  • e7543fe build(deps): bump @​types/node from 26.6.5 to 26.6.6 (#3877)
  • 6957076 docs: clarify packer prettify argument values (#3876)
  • 11c85a2 chore: Version bump to 9.15.1 (#3875)
  • ea6bff0 docs: say a hanging paragraph's left is where the lines after the first start...
  • a69a60b chore: sweep other merged branches in post-merge cleanup (#3873)
  • Additional commits viewable in compare view

Updates fast-xml-parser from 5.11.2 to 5.12.0

Release notes

Sourced from fast-xml-parser's releases.

v5.12.0

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.12.0 / 2026-11-03

  • perf improvement for stop node: After the first failure in a given stop node, the function stops using readTagExp and switches to a cheap fallback.
  • devdep:jasmine 7.0
  • deps:
    • @​nodable/entities v3.1.0
    • fast-xml-builder v1.3.1
    • is-unsafe v2.0.3
    • strnum v2.5.1
  • fix cjs typing
  • fix: preserve original metadata offsets for CRLF input (#911) (By sskift)

5.11.2 / 2026-09-29

  • fix (#875): decode Uint8Array XML input as UTF-8 (By emme1t)
  • fix (#880) :type EntityDecoderOptions.setXmlVersion's version as a number (By Yevhenii Kotyrlo)

5.11.1 / 2026-08-27

  • fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

  • feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]
  • fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]
  • fix: DOCTYPE to read SYSTEM/PUBLIC
  • deps: strnum v2.4.2

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0

... (truncated)

Commits

Updates framer-motion from 14.8.0 to 14.9.1

Changelog

Sourced from framer-motion's changelog.

[14.9.1] 2026-11-04

Added

  • Ensure accelerated transform animations finish correctly.
  • AnimatePresence: Fix exit never starting when a child mounts already exiting.
  • AnimatePresence: Fix exit stuck after an open layoutId card switches to another item.
  • Ensure accelerated animations are cleaned up in WebKit.

[14.9.0] 2026-10-30

Added

  • PresenceContext: Added internal keepValuesOnRemount option for internal use.
  • dragConstraints: Accepts function for internal use.
  • Reorder: Keyboard accessibility now focuses just the first item, arrows move focus, arrow keys work in relation to how items are presented on-screen.
Commits
  • 6be4a29 v14.9.1
  • 4216b2f Updating changelog
  • 30b1051 Latest
  • a2c76b9 Raise the motion/remix size limit to 49.2 kB
  • e945386 Keep the timeline running on the drag-animate test page
  • 625e6af Merge pull request #4035 from motiondivision/claude/project-thread-fx11r9
  • 405ebe2 Merge pull request #4043 from motiondivision/claude/project-thread-8iynk0
  • e835b8f Merge pull request #4045 from motiondivision/claude/project-thread-cb06bn
  • cc43fef Merge pull request #4050 from motiondivision/claude/project-thread-5hniaw
  • 0a0584b Keep values when an element is shown again only to exit
  • Additional commits viewable in compare view

Updates hyparquet-compressors from 1.1.2 to 1.1.3

Changelog

Sourced from hyparquet-compressors's changelog.

[1.1.3]

  • Fix gzip FEXTRA length offset (#3)
Commits

Updates jose from 6.2.14 to 6.2.15

Release notes

Sourced from jose's releases.

v6.2.15

Fixes

  • jwe: cancel decompression when output exceeds the limit (67541aa)
  • jwks: reject negative cache durations (a3b296f)
  • jwt: reject negative clockTolerance (67d6c83)
Changelog

Sourced from jose's changelog.

6.2.15 (2026-11-01)

Fixes

  • jwe: cancel decompression when output exceeds the limit (67541aa)
  • jwks: reject negative cache durations (a3b296f)
  • jwt: reject negative clockTolerance (67d6c83)
Commits
  • f931aa5 chore(release): 6.2.15
  • c2dd2ff test: verify decompression is cancelled on output limit
  • 67d6c83 fix(jwt): reject negative clockTolerance
  • 67541aa fix(jwe): cancel decompression when output exceeds the limit
  • a3b296f fix(jwks): reject negative cache durations
  • f3737f9 chore(deps-dev): bump electron from 45.0.0 to 45.1.0 in /tap/electron
  • f2fbc97 chore(deps-dev): bump workerd in /tap/workerd
  • 4533e9d chore(deps): bump the actions group with 4 updates
  • f9cee77 chore: cleanup after release
  • See full diff in compare view

Updates jsonpath-plus from 11.2.2 to 11.3.0

Changelog

Sourced from jsonpath-plus's changelog.

11.3.0

@dependabot
deps: bump the npm-minor-and-patch group with 31 updates
442fd69 
Bumps the npm-minor-and-patch group with 31 updates:

| Package | From | To |
| --- | --- | --- |
| [@imagemagick/magick-wasm](https://github.com/dlemstra/magick-wasm) | `0.0.45` | `0.0.46` |
| [@neslinesli93/qpdf-wasm](https://github.com/neslinesli93/qpdf-wasm) | `0.3.0` | `0.3.1` |
| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.32.1` | `3.33.0` |
| [@tiptap/extension-text-align](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-text-align) | `3.32.1` | `3.33.0` |
| [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.32.1` | `3.33.0` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.32.1` | `3.33.0` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.3` | `7.3.4` |
| [cbor-x](https://github.com/kriszyp/cbor-x) | `1.6.8` | `1.6.9` |
| [docx](https://github.com/dolanmiu/docx) | `9.15.0` | `9.15.2` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.2` | `5.12.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `14.8.0` | `14.9.1` |
| [hyparquet-compressors](https://github.com/hyparam/hyparquet-compressors) | `1.1.2` | `1.1.3` |
| [jose](https://github.com/panva/jose) | `6.2.14` | `6.2.15` |
| [jsonpath-plus](https://github.com/s3u/JSONPath) | `11.2.2` | `11.3.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.64.0` | `1.69.0` |
| [marked](https://github.com/markedjs/marked) | `18.1.2` | `18.1.3` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `12.2.0` | `12.3.0` |
| [music-metadata](https://github.com/Borewit/music-metadata) | `12.3.2` | `12.3.5` |
| [node-forge](https://github.com/digitalbazaar/forge) | `1.4.2` | `1.4.3` |
| [otpauth](https://github.com/hectorm/otpauth) | `9.5.2` | `9.6.0` |
| [oui-data](https://github.com/silverwind/oui-data) | `2.1.49` | `2.1.53` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.4.299` | `6.5.438` |
| [three](https://github.com/mrdoob/three.js) | `0.186.1` | `0.187.0` |
| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.186.0` | `0.187.0` |
| [turndown](https://github.com/mixmark-io/turndown) | `7.2.4` | `7.2.5` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.3` | `4.3.4` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.2` | `6.2.1` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.90.0` | `1.91.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.4` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.5` | `8.3.6` |


Updates `@imagemagick/magick-wasm` from 0.0.45 to 0.0.46
- [Release notes](https://github.com/dlemstra/magick-wasm/releases)
- [Commits](dlemstra/magick-wasm@0.0.45...0.0.46)

Updates `@neslinesli93/qpdf-wasm` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/neslinesli93/qpdf-wasm/releases)
- [Commits](neslinesli93/qpdf-wasm@0.3.0...0.3.1)

Updates `@tiptap/core` from 3.32.1 to 3.33.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.33.0/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.33.0/packages/core)

Updates `@tiptap/extension-text-align` from 3.32.1 to 3.33.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.33.0/packages/extension-text-align/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.33.0/packages/extension-text-align)

Updates `@tiptap/pm` from 3.32.1 to 3.33.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.33.0/packages/pm/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.33.0/packages/pm)

Updates `@tiptap/starter-kit` from 3.32.1 to 3.33.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.33.0/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.33.0/packages/starter-kit)

Updates `bson` from 7.3.3 to 7.3.4
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.3...v7.3.4)

Updates `cbor-x` from 1.6.8 to 1.6.9
- [Release notes](https://github.com/kriszyp/cbor-x/releases)
- [Commits](kriszyp/cbor-x@v1.6.8...v1.6.9)

Updates `docx` from 9.15.0 to 9.15.2
- [Release notes](https://github.com/dolanmiu/docx/releases)
- [Commits](dolanmiu/docx@9.15.0...9.15.2)

Updates `fast-xml-parser` from 5.11.2 to 5.12.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0)

Updates `framer-motion` from 14.8.0 to 14.9.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.8.0...v14.9.1)

Updates `hyparquet-compressors` from 1.1.2 to 1.1.3
- [Changelog](https://github.com/hyparam/hyparquet-compressors/blob/master/CHANGELOG.md)
- [Commits](hyparam/hyparquet-compressors@v1.1.2...v1.1.3)

Updates `jose` from 6.2.14 to 6.2.15
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.14...v6.2.15)

Updates `jsonpath-plus` from 11.2.2 to 11.3.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](https://github.com/s3u/JSONPath/commits/v11.3.0)

Updates `lucide-react` from 1.64.0 to 1.69.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.69.0/packages/lucide-react)

Updates `marked` from 18.1.2 to 18.1.3
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.2...v18.1.3)

Updates `mermaid` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.2.0...mermaid@12.3.0)

Updates `music-metadata` from 12.3.2 to 12.3.5
- [Release notes](https://github.com/Borewit/music-metadata/releases)
- [Commits](Borewit/music-metadata@v12.3.2...v12.3.5)

Updates `node-forge` from 1.4.2 to 1.4.3
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](digitalbazaar/forge@v1.4.2...v1.4.3)

Updates `otpauth` from 9.5.2 to 9.6.0
- [Release notes](https://github.com/hectorm/otpauth/releases)
- [Commits](hectorm/otpauth@v9.5.2...v9.6.0)

Updates `oui-data` from 2.1.49 to 2.1.53
- [Release notes](https://github.com/silverwind/oui-data/releases)
- [Commits](silverwind/oui-data@2.1.49...2.1.53)

Updates `pdfjs-dist` from 6.4.299 to 6.5.438
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v6.4.299...v6.5.438)

Updates `three` from 0.186.1 to 0.187.0
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `@types/three` from 0.186.0 to 0.187.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three)

Updates `turndown` from 7.2.4 to 7.2.5
- [Release notes](https://github.com/mixmark-io/turndown/releases)
- [Commits](mixmark-io/turndown@v7.2.4...v7.2.5)

Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `@tailwindcss/vite` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-vite)

Updates `@vitejs/plugin-react` from 6.1.2 to 6.2.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react)

Updates `oxlint` from 1.90.0 to 1.91.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.91.0/npm/oxlint)

Updates `tailwindcss` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/tailwindcss)

Updates `vite` from 8.3.5 to 8.3.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite)

---
updated-dependencies:
- dependency-name: "@imagemagick/magick-wasm"
  dependency-version: 0.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@neslinesli93/qpdf-wasm"
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@tiptap/core"
  dependency-version: 3.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tiptap/extension-text-align"
  dependency-version: 3.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tiptap/pm"
  dependency-version: 3.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: bson
  dependency-version: 7.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: cbor-x
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: docx
  dependency-version: 9.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: fast-xml-parser
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: framer-motion
  dependency-version: 14.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: hyparquet-compressors
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: jsonpath-plus
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: mermaid
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: music-metadata
  dependency-version: 12.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: node-forge
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: otpauth
  dependency-version: 9.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: oui-data
  dependency-version: 2.1.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: pdfjs-dist
  dependency-version: 6.5.438
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: three
  dependency-version: 0.187.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/three"
  dependency-version: 0.187.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: turndown
  dependency-version: 7.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.91.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
openfile Ready Ready Preview Nov 9, 2026 2:02am UTC
openfile-studio Ready Ready Preview Nov 9, 2026 2:02am UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
@aniruddhaadak80
aniruddhaadak80 merged commit ddf8a5e into main Nov 10, 2026
8 checks passed
@aniruddhaadak80
aniruddhaadak80 deleted the dependabot/npm_and_yarn/npm-minor-and-patch-e1512419db branch November 10, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aniruddhaadak80