Skip to content

build(deps): bump the npm-production group across 1 directory with 6 updates - #23

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-945d6bbc7e
Open

build(deps): bump the npm-production group across 1 directory with 6 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-945d6bbc7e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 5 updates in the / directory:

Package From To
@codemirror/autocomplete 6.20.0 6.20.2
@codemirror/commands 6.10.1 6.10.3
@codemirror/lang-javascript 6.2.4 6.2.5
@codemirror/language 6.12.1 6.12.3
lit 3.3.2 3.3.3

Updates @codemirror/autocomplete from 6.20.0 to 6.20.2

Changelog

Sourced from @​codemirror/autocomplete's changelog.

6.20.1 (2026-03-02)

Bug fixes

Clicking the horizontal dots at the top/bottom of a list of completion options now moves the selection there, so that more completions become visible.

Commits

Updates @codemirror/commands from 6.10.1 to 6.10.3

Changelog

Sourced from @​codemirror/commands's changelog.

6.10.3 (2026-03-12)

Bug fixes

Make sure selection-extending commands preserve the associativity of the selection head.

6.10.2 (2026-02-06)

Bug fixes

Move the selection to a less surprising place when undoing, moving the selection, redoing, then undoing again.

Commits
  • 6f83cb9 Mark version 6.10.3
  • 8364073 Properly preserve selection associativity in selection-extending commands
  • aa61d5c Add more tests for vertical cursor and selection motion
  • dbae3a1 Mark version 6.10.2
  • beecd58 Use a more reasonable start selection for the inverse of applied history events
  • 0587e5d Add a test cursorLineDown skipping trailing inline widgets
  • fe13f95 Add some more explicit type annotations
  • 2f99b7b Use git+https format for package.json repository field
  • a6196d9 Query configuration at start of line in changeLineComment
  • See full diff in compare view

Updates @codemirror/lang-javascript from 6.2.4 to 6.2.5

Changelog

Sourced from @​codemirror/lang-javascript's changelog.

6.2.5 (2026-03-02)

Bug fixes

Support code folding of JSX elements and tags.

When reading properties in scopeCompletionSource, use the original object, not a prototype.

Commits
  • a202a00 Mark version 6.2.5
  • 190b567 Fix missing inherited getters in enumeratePropertyCompletions
  • a94cdcb Add folding for JSX elements and tags
  • 78a8521 Use git+https format for package.json repository field
  • See full diff in compare view

Updates @codemirror/language from 6.12.1 to 6.12.3

Changelog

Sourced from @​codemirror/language's changelog.

6.12.3 (2026-03-25)

Bug fixes

Fix a crash in bracketMatching when composing at end of document.

6.12.2 (2026-02-25)

Bug fixes

Make sure brackets are highlighted in the initial editor state.

Pause bracket matching updates during composition, to avoid disrupting Mobile Safari's fragile composition handling.

Commits
  • f5af31e Mark version 6.12.3
  • 371c9ba Fix bogus bracket highlighting being generated at end of document
  • 9531899 Remove duplicated slash in forum url in README
  • 2f4e701 Fix forum link in readme
  • b5cd54b Mark version 6.12.2
  • 5f86763 Pause bracket matching updates during composition
  • af8dca9 Properly show matched brackets in the initial editor state
  • 693a25e Use git+https format for package.json repository field
  • See full diff in compare view

Updates @codemirror/state from 6.5.4 to 6.6.0

Changelog

Sourced from @​codemirror/state's changelog.

6.6.0 (2026-03-12)

New features

EditorSelection.range now takes an optional assoc argument.

SelectionRange.extend can now be given a third argument to specify associativity.

Commits
  • 821d9b7 Mark version 6.6.0
  • e035c74 Support an assoc argument to EditorSelection.range and SelectionRange.extend
  • eef74db Add type conversions to asArray
  • See full diff in compare view

Updates lit from 3.3.2 to 3.3.3

Release notes

Sourced from lit's releases.

lit-html@3.3.3

Patch Changes

lit@3.3.3

Patch Changes

Changelog

Sourced from lit's changelog.

3.3.3

Patch Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the npm-production group across 1 directory with 6 …
32e5021 
…updates

Bumps the npm-production group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.0` | `6.20.2` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.1` | `6.10.3` |
| [@codemirror/lang-javascript](https://github.com/codemirror/lang-javascript) | `6.2.4` | `6.2.5` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.1` | `6.12.3` |
| [lit](https://github.com/lit/lit/tree/HEAD/packages/lit) | `3.3.2` | `3.3.3` |



Updates `@codemirror/autocomplete` from 6.20.0 to 6.20.2
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/commands` from 6.10.1 to 6.10.3
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](codemirror/commands@6.10.1...6.10.3)

Updates `@codemirror/lang-javascript` from 6.2.4 to 6.2.5
- [Changelog](https://github.com/codemirror/lang-javascript/blob/main/CHANGELOG.md)
- [Commits](codemirror/lang-javascript@6.2.4...6.2.5)

Updates `@codemirror/language` from 6.12.1 to 6.12.3
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](codemirror/language@6.12.1...6.12.3)

Updates `@codemirror/state` from 6.5.4 to 6.6.0
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](codemirror/state@6.5.4...6.6.0)

Updates `lit` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/lit/lit/releases)
- [Changelog](https://github.com/lit/lit/blob/main/packages/lit/CHANGELOG.md)
- [Commits](https://github.com/lit/lit/commits/lit@3.3.3/packages/lit)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/commands"
  dependency-version: 6.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/lang-javascript"
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/language"
  dependency-version: 6.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/state"
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: lit
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 17, 2026
@socket-security

socket-security Bot commented Jun 17, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​codemirror/​state@​6.5.4 ⏵ 6.6.0100 +110079 +182100
Updated@​codemirror/​lang-javascript@​6.2.4 ⏵ 6.2.5100 +1100100 +181100
Updated@​codemirror/​commands@​6.10.1 ⏵ 6.10.3100 +110083 +183100
Updated@​codemirror/​language@​6.12.1 ⏵ 6.12.3100 +110092 +184100
Updated@​codemirror/​autocomplete@​6.20.0 ⏵ 6.20.2100 +110085 +189100
Updatedlit@​3.3.2 ⏵ 3.3.31001009289100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants