Skip to content

chore(deps): bump the prod-minor-patch group across 1 directory with 9 updates - #7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-patch-363e8d7dbc
Open

chore(deps): bump the prod-minor-patch group across 1 directory with 9 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-patch-363e8d7dbc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the prod-minor-patch group with 9 updates in the / directory:

Package From To
antd 6.6.1 6.6.3
axios 1.19.0 1.20.0
katex 0.18.4 0.18.7
lucide-react 1.34.0 1.45.0
mammoth 1.12.1 1.12.2
pdfkit 0.20.1 0.20.2
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
react-virtuoso 4.18.12 4.18.13

Updates antd from 6.6.1 to 6.6.3

Release notes

Sourced from antd's releases.

6.6.3

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.3

2026-09-07

6.6.2

2026-08-28

  • ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
  • 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
  • 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
  • Menu
    • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
    • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
    • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
  • Transfer
    • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
    • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
  • Table
    • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
    • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
  • Tree

... (truncated)

Commits
  • 6b46530 docs: add changelog for 6.6.3 (#59239)
  • 9e9d2d5 fix(DatePicker): use German date formats (#59151)
  • 9ed4ef1 docs: explain SVG icon alignment in FAQ (#59238)
  • c0972ce docs: align API table defaults and versions between en-US and zh-CN (#59214)
  • c840fec docs: align open-state callback parameter names (#59236)
  • 23207f0 fix: stop mutating the mask config object passed by the user (#59233)
  • e825c6d docs: align getting started guides (#59188)
  • a170e43 chore(deps): update nearform-actions/github-action-notify-twitter digest to c...
  • a3f839f chore(deps): update dependency @​antfu/eslint-config to ~9.5.0 (#59227)
  • c4a242f chore(deps): update jest dependencies to v30.5.1 (#59228)
  • Additional commits viewable in compare view

Updates axios from 1.19.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

  • HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

  • Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

  • Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
  • Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
  • XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
  • Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
  • Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

  • Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
  • Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
  • Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
  • CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

Changelog

Sourced from axios's changelog.

Changelog

Commits
  • 84a9f3b chore(release): prepare release 1.20.0 (#11152)
  • e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
  • d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
  • 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
  • d19040b fix: harden runtime option handling (#11141)
  • e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
  • d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
  • 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
  • 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
  • ba98559 docs: add ScrapingBee sponsor (#11137)
  • Additional commits viewable in compare view

Updates katex from 0.18.4 to 0.18.7

Release notes

Sourced from katex's releases.

v0.18.7

0.18.7 (2026-09-06)

Features

v0.18.6

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

v0.18.5

0.18.5 (2026-08-31)

Bug Fixes

Changelog

Sourced from katex's changelog.

0.18.7 (2026-09-06)

Features

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

0.18.5 (2026-08-31)

Bug Fixes

Commits
  • cd5ec4f chore(release): 0.18.7 [ci skip]
  • ab509fd feat: add \reflectbox and \mapsfrom support (#4262)
  • 9eb45b7 chore(release): 0.18.6 [ci skip]
  • 02d552c fix(array): preserve tags on empty final rows (#4277)
  • 49904aa chore(deps): update dependency browserslist to v4.28.7 [security] (#4280)
  • 2d2a177 chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 (#4275)
  • 7f46076 chore(release): 0.18.5 [ci skip]
  • 6805538 fix(char): accept U+10FFFF (#4265)
  • 0df23bb chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8 (#4273)
  • bd78fad chore(deps): update dependency commander to v15 (#4271)
  • Additional commits viewable in compare view

Updates lucide-react from 1.34.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

New Contributors

... (truncated)

Commits

Updates mammoth from 1.12.1 to 1.12.2

Changelog

Sourced from mammoth's changelog.

1.12.2

  • Avoid prototype pollution when reading the styles defined in a document. This avoids an issue where a maliciously crafted document could be used to set externalFileAccess to true.
Commits
  • 8706034 Bump version to 1.12.2
  • 2888fa1 Create objects without prototypes when used as map with arbitrary keys
  • 31f0c37 Avoid prototype pollution when reading styles
  • See full diff in compare view

Updates pdfkit from 0.20.1 to 0.20.2

Release notes

Sourced from pdfkit's releases.

v0.20.2

  • Fix bundlers and file tracers packing the ESM copies of the standard font metrics instead of the CommonJS ones the Node build actually loads, which left Cannot find module errors for every standard font at runtime, by resolving the internal #standard-fonts/* mapping to a single file under all conditions
  • Fix doc.file() throwing when the same in-memory attachment is embedded twice under one name, because the creation and modified dates the deduplication check compares are absent for sources that are not read from disk
  • Fix doc.text() throwing unsupported number: NaN when lineBreak: false is combined with underline, strike, link or goTo, because the rendered width was computed from the line wrapper's measurements, which are never produced when wrapping is disabled
Changelog

Sourced from pdfkit's changelog.

[v0.20.2] - 2026-08-29

  • Fix bundlers and file tracers packing the ESM copies of the standard font metrics instead of the CommonJS ones the Node build actually loads, which left Cannot find module errors for every standard font at runtime, by resolving the internal #standard-fonts/* mapping to a single file under all conditions
  • Fix doc.file() throwing when the same in-memory attachment is embedded twice under one name, because the creation and modified dates the deduplication check compares are absent for sources that are not read from disk
  • Fix doc.text() throwing unsupported number: NaN when lineBreak: false is combined with underline, strike, link or goTo, because the rendered width was computed from the line wrapper's measurements, which are never produced when wrapping is disabled
Commits
  • 8d72a71 v0.20.2
  • 70c9ad5 Document the parameter list each destination type takes (#1785)
  • e04b677 Fix doc.text() throwing NaN with lineBreak false and underline/strike/link/go...
  • c6f57c6 fix: resolve #standard-fonts/* to one file under every condition (#1782)
  • b87b5ac Fix case-insensitive lookup for named CSS colors (#1780)
  • 69671d9 Fix doc.file() throwing when the same in-memory attachment is added twice (#1...
  • 1f1abb8 Bump ip-address from 10.2.0 to 10.4.0 (#1761)
  • f58c4c7 Bump postcss from 8.5.15 to 8.5.25 (#1762)
  • See full diff in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the prod-minor-patch group with 9 updates chore(deps): bump the prod-minor-patch group across 1 directory with 9 updates Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-minor-patch-363e8d7dbc branch 2 times, most recently from fdd20ea to 196b5e9 Compare September 15, 2026 06:28
@dependabot
chore(deps): bump the prod-minor-patch group across 1 directory with …
b458c4c 
…9 updates

Bumps the prod-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [antd](https://github.com/ant-design/ant-design) | `6.6.1` | `6.6.3` |
| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.18.4` | `0.18.7` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.45.0` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.1` | `1.12.2` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.20.1` | `0.20.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.12` | `4.18.13` |



Updates `antd` from 6.6.1 to 6.6.3
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@6.6.1...6.6.3)

Updates `axios` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.19.0...v1.20.0)

Updates `katex` from 0.18.4 to 0.18.7
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.18.4...v0.18.7)

Updates `lucide-react` from 1.34.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react)

Updates `mammoth` from 1.12.1 to 1.12.2
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.1...1.12.2)

Updates `pdfkit` from 0.20.1 to 0.20.2
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.20.1...v0.20.2)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `react-virtuoso` from 4.18.12 to 4.18.13
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.13/packages/react-virtuoso)

---
updated-dependencies:
- dependency-name: antd
  dependency-version: 6.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: katex
  dependency-version: 0.18.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: mammoth
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-minor-patch-363e8d7dbc branch from 196b5e9 to b458c4c Compare September 15, 2026 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants