Skip to content

deps(deps): bump the production-dependencies group in /SortVision with 11 updates - #1009

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/production-dependencies-0eedf6c159
Open

deps(deps): bump the production-dependencies group in /SortVision with 11 updates#1009
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/production-dependencies-0eedf6c159

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group in /SortVision with 11 updates:

Package From To
dompurify 3.4.14 3.4.16
framer-motion 13.1.1 13.4.4
lucide-react 1.38.0 1.48.0
monaco-editor 0.56.0 0.57.0
next 16.3.4 16.3.6
node-html-parser 9.0.2 9.0.4
openai 7.8.0 7.23.0
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
tailwind-merge 3.6.0 3.7.0
zod 4.5.4 4.6.5

Updates dompurify from 3.4.14 to 3.4.16

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates framer-motion from 13.1.1 to 13.4.4

Changelog

Sourced from framer-motion's changelog.

[13.4.4] 2026-09-25

Changed

  • scroll: 44% smaller.
  • useScroll: 33% smaller.
  • Scroll callbacks: 50% faster.
  • Removed ScrollTimeline support for JS callbacks as benchmarked no improvement over scrollInfo.

Fixed

  • useDragControls: Fixed snapToCursor origin drift on repeated calls.
  • drag: Improved pointerend timing.
  • spring: Check invalid spring values before applying.
  • AnimatePresence: Ensure children don't stick during reentry.

[13.4.3] 2026-09-24

Fixed

  • <motion>: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

  • Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.
  • Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

  • animate: CSS variable writes on SVGs apply to style attribute.

[13.4.0] 2026-09-14

Added

  • AnimateView: View transitions for React 19.3, built on React's ViewTransition.

[13.3.0] 2026-09-14

Added

  • Hooks for Motion Editor.

Changed

  • springValue/useSpring: 80% reduction in time when retargeting.

... (truncated)

Commits
  • 33f6e72 v13.4.4
  • e50ec7b Updating changelog
  • 6e98fce Fix spelling mistakes in code comments
  • a47d6f2 Fix AnimatePresence child stuck at initial after re-entering during exit (#3834)
  • 164be2b v13.4.3
  • d2747a2 Updating changelog
  • 720530a Merge pull request #3833 from motiondivision/cursor/bc-824bfd3c-7a94-4eee-be1...
  • 7eb469a Fix #3832: Replay animations when Suspense reveals memoized motion content
  • be8a4b3 Add failing Cypress test for Suspense reveal of memoized content (#3832)
  • ef59724 Add failing tests for animations after Suspense reveals memoized content (#3832)
  • Additional commits viewable in compare view

Updates lucide-react from 1.38.0 to 1.48.0

Release notes

Sourced from lucide-react's releases.

Version 1.48.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

New Contributors

... (truncated)

Commits

Updates monaco-editor from 0.56.0 to 0.57.0

Release notes

Sourced from monaco-editor's releases.

v0.57.0

Changes:

  • #5487: Prepare Monaco Editor 0.57.0 release
  • #5415: Bump uuid and webpack-dev-server in /website
  • #5476: Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website
  • #5474: Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel
  • #5479: Bump actions/deploy-pages from 5.0.0 to 5.0.1 in the github-actions group
  • #5468: Bump browserslist from 4.28.1 to 4.28.8 in /website
  • #5475: Bump js-yaml from 4.3.1 to 4.3.2
  • #5470: Bump fast-uri from 3.1.2 to 3.1.7 in /webpack-plugin
  • #5469: Bump nanoid from 3.3.11 to 3.3.18 in /webpack-plugin
  • #5467: Bump fast-uri from 3.1.5 to 3.1.7 in /samples/browser-esm-webpack-typescript-react
  • #5466: Bump fast-uri from 3.1.2 to 3.1.7 in /samples
  • #5465: Bump fast-uri from 3.1.4 to 3.1.7 in /website
  • #5463: Bump postcss-selector-parser from 7.1.0 to 7.1.5 in /website
  • #5416: Bump @​babel/core from 7.17.8 to 7.29.7 in /samples/browser-esm-vite-react
  • #5438: Bump electron from 39.8.5 to 39.8.10 in /samples
  • #5460: Bump the github-actions group with 7 updates
  • #5456: Pin GitHub Actions to full-length commit SHAs
  • #5450: Bump postcss from 8.5.12 to 8.5.26
  • #5449: Bump js-yaml from 4.2.0 to 4.3.1
  • #5439: Bump postcss from 8.5.13 to 8.5.26 in /samples
  • #5441: Bump postcss from 8.5.15 to 8.5.26 in /samples/browser-esm-vite-react
  • #5432: Bump undici from 7.28.0 to 7.29.0
  • #5440: Bump brace-expansion in /website
  • #5436: Bump fast-uri from 3.1.4 to 3.1.5 in /samples/browser-esm-webpack-typescript-react
  • #5437: Bump fast-uri from 3.1.2 to 3.1.5
  • #5413: Bump svgo from 2.8.2 to 2.8.3 in /samples/browser-esm-parcel
  • #5419: Bump launch-editor from 2.12.0 to 2.14.1 in /website
  • #5414: Bump fast-uri from 3.1.2 to 3.1.4 in /samples/browser-esm-webpack-typescript-react
  • #5417: Bump minimatch from 3.1.2 to 3.1.5 in /webpack-plugin
  • #5420: Bump ws from 8.18.0 to 8.21.1 in /samples
  • #5418: Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /samples
  • #5412: Bump fast-uri from 3.1.2 to 3.1.4 in /website
  • #5411: Bump shell-quote from 1.8.4 to 1.10.0 in /website
  • #5409: Bump webpack-dev-server from 5.2.5 to 5.2.6 in /samples
  • #5410: Bump postcss from 8.5.14 to 8.5.23 in /website
  • #5407: Bump immutable from 5.1.5 to 5.1.9 in /website
  • #5401: Bump brace-expansion from 1.1.11 to 1.1.16 in /samples

This list of changes was auto generated.

v0.57.0-rc.2

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.57.0]

New Features and APIs

  • Adds editor.wordWrapIndicator to display an indicator at the wrapping column of soft-wrapped lines.
  • Adds editor.fullwidthCharacterWidth, with font and twoCells modes for rendering full-width characters.
  • Adds languages.score to score a language selector against a URI and language.
  • Exports the editor.DiffEditorViewMode type.
  • Adds isForAnotherDocument to the inline completion languages.LifetimeSummary type.

Updates

  • Updates the editor core to VS Code commit 6a598d4a13031703d483d103c1d934a36ad27971, validated in 0.57.0-rc.2.
  • Updates bundled DOMPurify from 3.4.8 to 3.4.15.
Commits
  • d618242 Merge pull request #5487 from microsoft/hediet/b/release-0.57.0
  • ef061ff Prepare Monaco Editor 0.57.0 release
  • 8e9b0f7 Keep editor release version stable across task retries
  • 3f31304 Prepare VS Code native headers before installing dependencies
  • ebd1312 Use authenticated Foundry Local installer for core builds
  • 176408b Align release build Node version with VS Code 1.139
  • 97d81ca Bump uuid and webpack-dev-server in /website (#5415)
  • f7c7f4c Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website (#5476)
  • 36f4fe6 Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel (#5474)
  • f24cd7f Bump actions/deploy-pages in the github-actions group (#5479)
  • Additional commits viewable in compare view

Updates next from 16.3.4 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)
Commits
  • a758ffc v16.3.6
  • 868fad3 [active-lts] Harden next/og SVG serialization
  • 8c81cbb [lts-active] test: remove unsupported deployment ID builder cases (#98821)
  • ca2c75e v16.3.5
  • 14fb290 [backport] Fix use cache prerender signal retention (#98448)
  • 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
  • 4b56cee [16.3.x] Backport docs fixes (#98317)
  • 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
  • 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
  • 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
  • Additional commits viewable in compare view

Updates node-html-parser from 9.0.2 to 9.0.4

Changelog

Sourced from node-html-parser's changelog.

9.0.4 (2026-09-07)

9.0.3 (2026-09-03)

Bug Fixes

  • encode special characters in HTMLElement textContent setter (48eb649)
  • keep attributes whose name starts with an underscore (3aff8be), closes #129 #129 #206
  • stop appending a stray '<' to unterminated block-text elements (48300fe)
Commits
  • c0cae42 chore(release): 9.0.4
  • 468e8f2 Merge branch 'adarshx01-fix/unclosed-dt-dd'
  • f561cd0 Merge branch 'fix/unclosed-dt-dd' of github.com:adarshx01/node-html-parser in...
  • 4677000 chore(release): 9.0.3
  • ee9a9e6 Merge pull request #312 from spokodev/fix/textcontent-encode-special-chars
  • 5268108 Merge pull request #313 from spokodev/fix/unterminated-block-text-stray-lt
  • 79008d4 Merge pull request #314 from spokodev/fix/leading-underscore-attributes
  • 3aff8be fix: keep attributes whose name starts with an underscore
  • 48300fe fix: stop appending a stray '<' to unterminated block-text elements
  • 48eb649 fix: encode special characters in HTMLElement textContent setter
  • Additional commits viewable in compare view

Updates openai from 7.8.0 to 7.23.0

Release notes

Sourced from openai's releases.

v7.23.0

7.23.0 (2026-09-23)

Features

Chores

  • api: document exact Chat Completions seed bounds (#2796) (13b844f)

v7.22.0

7.22.0 (2026-09-22)

Features

  • api: add GPT-6 Sol and Luna model identifiers (#2790) (cff2135)

v7.21.0

7.21.0 (2026-09-22)

Features

  • api: add session environment reset events (#2777) (5de2360)

Bug Fixes

  • api: preserve model choices and improve request handling (#2787) (a4a4396)

Chores

  • api: document response management resources (#2775) (0472fb3)

v7.20.0

7.20.0 (2026-09-19)

Features

  • api: add environment-variable vault credentials (#2768) (fbccf12)
  • api: add external storage configuration management (#2773) (7e89b62)
  • api: add safety case retrieval (#2774) (d357e64)
  • api: add safety warning and deactivation webhook events (#2772) (91c7fb5)

... (truncated)

Changelog

Sourced from openai's changelog.

7.23.0 (2026-09-23)

Features

Chores

  • api: document exact Chat Completions seed bounds (#2796) (13b844f)

7.22.0 (2026-09-22)

Features

  • api: add GPT-6 Sol and Luna model identifiers (#2790) (cff2135)

7.21.0 (2026-09-22)

Features

  • api: add session environment reset events (#2777) (5de2360)

Bug Fixes

  • api: preserve model choices and improve request handling (#2787) (a4a4396)

Chores

  • api: document response management resources (#2775) (0472fb3)

7.20.0 (2026-09-19)

Features

  • api: add environment-variable vault credentials (#2768) (fbccf12)
  • api: add external storage configuration management (#2773) (7e89b62)
  • api: add safety case retrieval (#2774) (d357e64)
  • api: add safety warning and deactivation webhook events (#2772) (91c7fb5)
  • api: add SIP media security to incoming call events (#2770) (db9a57b)

Bug Fixes

... (truncated)

Commits

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

@dependabot
deps(deps): bump the production-dependencies group
1ed1580 
Bumps the production-dependencies group in /SortVision with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.16` |
| [framer-motion](https://github.com/motiondivision/motion) | `13.1.1` | `13.4.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.38.0` | `1.48.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.56.0` | `0.57.0` |
| [next](https://github.com/vercel/next.js) | `16.3.4` | `16.3.6` |
| [node-html-parser](https://github.com/taoqf/node-fast-html-parser) | `9.0.2` | `9.0.4` |
| [openai](https://github.com/openai/openai-node) | `7.8.0` | `7.23.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |


Updates `dompurify` from 3.4.14 to 3.4.16
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.16)

Updates `framer-motion` from 13.1.1 to 13.4.4
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v13.1.1...v13.4.4)

Updates `lucide-react` from 1.38.0 to 1.48.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.48.0/packages/lucide-react)

Updates `monaco-editor` from 0.56.0 to 0.57.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.56.0...v0.57.0)

Updates `next` from 16.3.4 to 16.3.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.4...v16.3.6)

Updates `node-html-parser` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/taoqf/node-fast-html-parser/releases)
- [Changelog](https://github.com/taoqf/node-html-parser/blob/main/CHANGELOG.md)
- [Commits](taoqf/node-html-parser@v9.0.2...v9.0.4)

Updates `openai` from 7.8.0 to 7.23.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.8.0...v7.23.0)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: framer-motion
  dependency-version: 13.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: monaco-editor
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: node-html-parser
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from alienx5499 as a code owner October 1, 2026 02:13
@dependabot dependabot Bot added automated dependencies Pull requests that update a dependency file npm labels Oct 1, 2026
@vercel

vercel Bot commented Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sortvision Ready Ready Preview Oct 1, 2026 2:14am UTC

This branch was successfully deployed

1 active deployment
Preview — 1ed15800 Deployed Oct 1, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alienx5499 alienx5499 Awaiting requested review from alienx5499 alienx5499 is a code owner

Assignees

@alienx5499 alienx5499

Labels

automated dependencies Pull requests that update a dependency file npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alienx5499