deps: bump the npm-minor-and-patch group with 13 updates by dependabot[bot] · Pull Request #8 · aniruddhaadak80/OpenFile

dependabot · 2026-11-02T02:00:53Z

Bumps the npm-minor-and-patch group with 13 updates:

Package	From	To
@tiptap/core	`3.32.0`	`3.32.1`
@tiptap/extension-text-align	`3.32.0`	`3.32.1`
@tiptap/pm	`3.32.0`	`3.32.1`
@tiptap/starter-kit	`3.32.0`	`3.32.1`
file-type	`22.2.0`	`22.3.0`
framer-motion	`14.7.1`	`14.8.0`
hyparquet	`1.31.5`	`1.32.0`
jose	`6.2.13`	`6.2.14`
lucide-react	`1.63.0`	`1.64.0`
oui-data	`2.1.48`	`2.1.49`
postal-mime	`4.1.4`	`4.2.0`
svg2pdf.js	`2.8.1`	`2.9.0`
@types/node	`26.6.5`	`26.6.6`

Updates @tiptap/core from 3.32.0 to 3.32.1

Commits

See full diff in compare view

Updates @tiptap/extension-text-align from 3.32.0 to 3.32.1

Commits

See full diff in compare view

Updates @tiptap/pm from 3.32.0 to 3.32.1

Commits

See full diff in compare view

Updates @tiptap/starter-kit from 3.32.0 to 3.32.1

Commits

See full diff in compare view

Updates file-type from 22.2.0 to 22.3.0

Release notes

Sourced from file-type's releases.

v22.3.0

Harden EBML header traversal with a bounded tokenizer view (#813) 08bef8e

Refactor ZIP detection to use upstream traversal limits (#812) 0c14b6f

sindresorhus/file-type@v22.2.0...v22.3.0

Commits

deb4506 22.3.0
08bef8e Harden EBML header traversal with a bounded tokenizer view (#813)
0c14b6f Refactor ZIP detection to use upstream traversal limits (#812)
See full diff in compare view

Updates framer-motion from 14.7.1 to 14.8.0

Changelog

Sourced from framer-motion's changelog.

[14.8.0] 2026-10-29

Added

transition: Added mixer option for passing custom mixer functions.

Fixed

Only counts projection stats while recordStats() is running.

Fix accelerated animations stuck at initial after remount.

drag: 20% smaller.

m component: 6% smaller.

Keep timeline adjustments within timeline scope.

Reorder

Commits

1b27a83 v14.8.0
4d29f83 Poll in timing-dependent Playwright assertions
161f75c Updating changelog
2bc460c Merge pull request #4017 from motiondivision/claude/project-thread-45aghj-tra...
02f87ff Merge pull request #4025 from motiondivision/claude/project-thread-vr1k3n
233f96b Merge pull request #4024 from motiondivision/claude/project-thread-k8ixr1
f3b4700 Merge branch 'main' into claude/project-thread-k8ixr1
18c18bd Merge pull request #4014 from motiondivision/claude/project-thread-45aghj-van...
9bf12d5 Merge the remote branch, which merged main without #4013
cd3e233 Merge main into claude/project-thread-45aghj-vanilla-drag-node
Additional commits viewable in compare view

Updates hyparquet from 1.31.5 to 1.32.0

Changelog

Sourced from hyparquet's changelog.

[1.32.0]

Adaptive Lossless Floating Point (ALP) encoding support (#161)

FILE logical type support

Fix DECIMAL values off by one ulp from inexact scaling (#199)

Read empty repeated leaf fields as empty lists (#201)

Skip decompressing empty v2 data pages (#200)

Commits

a329335 Publish v1.32.0
0debb92 FILE logical type support
a6e1170 Read empty repeated leaf fields as empty lists (#201)
9d0cad5 Fix DECIMAL values off by one ulp from inexact scaling (#199)
0fb189d Skip decompressing empty v2 data pages (#200)
76bccee Adaptive Lossless Floating Point (#161)
See full diff in compare view

Updates jose from 6.2.13 to 6.2.14

Release notes

Sourced from jose's releases.

v6.2.14

Fixes

types: preserve contextual JWT payload inference (0dbf7a0), closes #911

Changelog

Sourced from jose's changelog.

6.2.14 (2026-10-29)

Fixes

types: preserve contextual JWT payload inference (0dbf7a0), closes #911

Commits

5a6a5b6 chore(release): 6.2.14
b04c907 test: handle JWKS rotation and algorithm migration
4e3292e chore: bump packages
0dbf7a0 fix(types): preserve contextual JWT payload inference
4080772 test: simplify runtime support checks
2cddc59 chore: cleanup after release
See full diff in compare view

Updates lucide-react from 1.63.0 to 1.64.0

Release notes

Sourced from lucide-react's releases.

Version 1.64.0

What's Changed

chore(docs|site): Remove Plausible, add tracking events and privacy statement by @ericfennis in lucide-icons/lucide#5092

feat(icons): added square-kanban-plus icon by @KesleyDavid in lucide-icons/lucide#4688

feat(icons): added letter-b, letter-c, letter-d and 21 more icons by @karsa-mistmere in lucide-icons/lucide#4743

feat(icons): added numbers icon by @karsa-mistmere in lucide-icons/lucide#4778

feat(icons): added circle-letter-a, circle-letter-b, circle-letter-c and 46 more icons by @karsa-mistmere in lucide-icons/lucide#4744

feat(icons): added new Letters & digits category by @karsa-mistmere in lucide-icons/lucide#5095

fix(icons): align Unicode currency icon cap heights with other typographic icons by @karsa-mistmere in lucide-icons/lucide#4926

ci(claude-review): add Claude PR review workflow by @ericfennis in lucide-icons/lucide#5097

fix(icons): remove bracket from square-letter-d.svg by @ericfennis in lucide-icons/lucide#5101

New Contributors

@KesleyDavid made their first contribution in lucide-icons/lucide#4688

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Commits

See full diff in compare view

Updates oui-data from 2.1.48 to 2.1.49

Release notes

Sourced from oui-data's releases.

2.1.49

automated data update (github-actions[bot])

Commits

8d5a621 2.1.49
225fdae automated data update
See full diff in compare view

Updates postal-mime from 4.1.4 to 4.2.0

Release notes

Sourced from postal-mime's releases.

v4.2.0

4.2.0 (2026-10-29)

Features

parse the OTP-Token header into email.otp (740b3ab)

Changelog

Sourced from postal-mime's changelog.

4.2.0 (2026-10-29)

Features

parse the OTP-Token header into email.otp (740b3ab)

Commits

939a220 chore(master): release 4.2.0 (#122)
740b3ab feat: parse the OTP-Token header into email.otp
See full diff in compare view

Updates svg2pdf.js from 2.8.1 to 2.9.0

Release notes

Sourced from svg2pdf.js's releases.

v2.9.0

What's Changed

Drop all-zero stroke-dasharray when emitting PDF by @amandeavor in yWorks/svg2pdf.js#382

Preserve hair spaces when normalizing SVG text by @Boulea7 in yWorks/svg2pdf.js#387

Add styleNonce option for CSP compliance by @ryusuke-seto in yWorks/svg2pdf.js#392

New Contributors

@Boulea7 made their first contribution in yWorks/svg2pdf.js#387

@ryusuke-seto made their first contribution in yWorks/svg2pdf.js#392

Full Changelog: yWorks/svg2pdf.js@v2.8.1...v2.9.0

Commits

4c57644 2.9.0
e5ab986 add permissions to CI workflow
15edf27 fix potential quadratic runtime regex in trimRight function
ae75bff bump vitest to 5 (#393)
4af9656 Add styleNonce option for CSP compliance (#392)
df6f16a Preserve hair spaces when normalizing SVG text (#387)
664ed86 Bump vite from 8.2.2 to 8.3.4 (#391)
28c5502 Drop all-zero stroke-dasharray when emitting PDF (#382)
1f2b2df Bump dompurify from 3.4.13 to 3.4.17 (#386)
926ee8d Bump source-map-js from 1.2.1 to 1.2.2 (#388)
Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-and-patch group with 13 updates: | Package | From | To | | --- | --- | --- | | [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.32.0` | `3.32.1` | | [@tiptap/extension-text-align](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-text-align) | `3.32.0` | `3.32.1` | | [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.32.0` | `3.32.1` | | [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.32.0` | `3.32.1` | | [file-type](https://github.com/sindresorhus/file-type) | `22.2.0` | `22.3.0` | | [framer-motion](https://github.com/motiondivision/motion) | `14.7.1` | `14.8.0` | | [hyparquet](https://github.com/hyparam/hyparquet) | `1.31.5` | `1.32.0` | | [jose](https://github.com/panva/jose) | `6.2.13` | `6.2.14` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.63.0` | `1.64.0` | | [oui-data](https://github.com/silverwind/oui-data) | `2.1.48` | `2.1.49` | | [postal-mime](https://github.com/postalsys/postal-mime) | `4.1.4` | `4.2.0` | | [svg2pdf.js](https://github.com/yWorks/svg2pdf.js) | `2.8.1` | `2.9.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` | Updates `@tiptap/core` from 3.32.0 to 3.32.1 - [Release notes](https://github.com/ueberdosis/tiptap/releases) - [Changelog](https://github.com/ueberdosis/tiptap/blob/main/CHANGELOG.md) - [Commits](https://github.com/ueberdosis/tiptap/commits/HEAD/packages/core) Updates `@tiptap/extension-text-align` from 3.32.0 to 3.32.1 - [Release notes](https://github.com/ueberdosis/tiptap/releases) - [Changelog](https://github.com/ueberdosis/tiptap/blob/main/CHANGELOG.md) - [Commits](https://github.com/ueberdosis/tiptap/commits/HEAD/packages/extension-text-align) Updates `@tiptap/pm` from 3.32.0 to 3.32.1 - [Release notes](https://github.com/ueberdosis/tiptap/releases) - [Changelog](https://github.com/ueberdosis/tiptap/blob/main/CHANGELOG.md) - [Commits](https://github.com/ueberdosis/tiptap/commits/HEAD/packages/pm) Updates `@tiptap/starter-kit` from 3.32.0 to 3.32.1 - [Release notes](https://github.com/ueberdosis/tiptap/releases) - [Changelog](https://github.com/ueberdosis/tiptap/blob/main/CHANGELOG.md) - [Commits](https://github.com/ueberdosis/tiptap/commits/HEAD/packages/starter-kit) Updates `file-type` from 22.2.0 to 22.3.0 - [Release notes](https://github.com/sindresorhus/file-type/releases) - [Commits](sindresorhus/file-type@v22.2.0...v22.3.0) Updates `framer-motion` from 14.7.1 to 14.8.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v14.7.1...v14.8.0) Updates `hyparquet` from 1.31.5 to 1.32.0 - [Changelog](https://github.com/hyparam/hyparquet/blob/master/CHANGELOG.md) - [Commits](hyparam/hyparquet@v1.31.5...v1.32.0) Updates `jose` from 6.2.13 to 6.2.14 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.13...v6.2.14) Updates `lucide-react` from 1.63.0 to 1.64.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/lucide-react) Updates `oui-data` from 2.1.48 to 2.1.49 - [Release notes](https://github.com/silverwind/oui-data/releases) - [Commits](silverwind/oui-data@2.1.48...2.1.49) Updates `postal-mime` from 4.1.4 to 4.2.0 - [Release notes](https://github.com/postalsys/postal-mime/releases) - [Changelog](https://github.com/postalsys/postal-mime/blob/master/CHANGELOG.md) - [Commits](postalsys/postal-mime@v4.1.4...v4.2.0) Updates `svg2pdf.js` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/yWorks/svg2pdf.js/releases) - [Commits](yWorks/svg2pdf.js@v2.8.1...v2.9.0) Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@tiptap/core" dependency-version: 3.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@tiptap/extension-text-align" dependency-version: 3.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@tiptap/pm" dependency-version: 3.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@tiptap/starter-kit" dependency-version: 3.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: file-type dependency-version: 22.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: framer-motion dependency-version: 14.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: hyparquet dependency-version: 1.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: jose dependency-version: 6.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: lucide-react dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: oui-data dependency-version: 2.1.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: postal-mime dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: svg2pdf.js dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-11-02T02:00:55Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openfile	Ready	Preview	Nov 2, 2026 2:02am UTC
openfile-studio	Ready	Preview	Nov 2, 2026 2:02am UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026

aniruddhaadak80 merged commit af261f5 into main Nov 2, 2026
8 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-a978b85d7d branch November 2, 2026 10:41

Navigation Menu

Repository navigation

deps: bump the npm-minor-and-patch group with 13 updates - #8

deps: bump the npm-minor-and-patch group with 13 updates#8
aniruddhaadak80 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-a978b85d7d

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

vercel Bot commented Nov 2, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

v22.3.0

[14.8.0] 2026-10-29

Added

Fixed

[1.32.0]

v6.2.14

Fixes

6.2.14 (2026-10-29)

Fixes

Version 1.64.0

What's Changed

New Contributors

2.1.49

v4.2.0

4.2.0 (2026-10-29)

Features

4.2.0 (2026-10-29)

Features

v2.9.0

What's Changed

New Contributors

Uh oh!

vercel Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Nov 2, 2026 •

edited

Loading