Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the minor-and-patch group with 10 updates:

Package From To
isomorphic-dompurify 2.32.0 2.33.0
@vscode/vsce 3.7.0 3.7.1
@aws-sdk/client-s3 3.934.0 3.939.0
@aws-sdk/s3-request-presigner 3.934.0 3.939.0
marked 17.0.0 17.0.1
@cloudflare/vite-plugin 1.15.0 1.15.2
@cloudflare/workers-types 4.20251119.0 4.20251125.0
vue-tsc 3.1.4 3.1.5
wrangler 4.49.0 4.50.0
@codemirror/autocomplete 6.19.1 6.20.0

Updates isomorphic-dompurify from 2.32.0 to 2.33.0

Release notes

Sourced from isomorphic-dompurify's releases.

2.33.0: Improved Web Worker support

Changelog

See the complete changelog for more details.

Release

2.33.0

Commits
  • f6613bd docs: Improved readme.
  • 4404586 docs: Improved readme. Incremented project version.
  • 6d06f11 Merge pull request #242 from wSedlacek/feat/worker-support
  • a279561 Merge pull request #376 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.13
  • 89679a9 chore(deps-dev): bump vitest from 4.0.12 to 4.0.13
  • e93ddbd Merge pull request #375 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.12
  • 4b4ae36 chore(deps-dev): bump vitest from 4.0.10 to 4.0.12
  • 0350339 Merge pull request #374 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.10
  • 34cb568 chore(deps-dev): bump vitest from 4.0.9 to 4.0.10
  • bd37ccc Merge pull request #373 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.9
  • Additional commits viewable in compare view

Updates @vscode/vsce from 3.7.0 to 3.7.1

Release notes

Sourced from @​vscode/vsce's releases.

v3.7.1

Changes:

This list of changes was auto generated.

v3.7.1-1

Changes:

This list of changes was auto generated.

v3.7.1-0

Changes:

This list of changes was auto generated.

Commits

Updates @aws-sdk/client-s3 from 3.934.0 to 3.939.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.939.0

3.939.0(2025-11-24)

Chores
  • scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)
New Features
  • client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
  • client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)
Bug Fixes
  • clients: export enum objects for string shapes (#7521) (62f648df)
  • cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)
Tests

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

v3.938.0

3.938.0(2025-11-21)

Chores
  • codegen: smithy-aws-typescript-codegen 0.38.0 (#7513) (cdb4d374)
Documentation Changes
  • client-elastic-load-balancing-v2: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. (d5c668b7)
New Features
  • clients: update client endpoints as of 2025-11-21 (770cf0d9)
  • client-redshift: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. (b030ee0c)
  • client-invoicing: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. (612d1d7c)
  • client-transfer: Adds support for creating Webapps accessible from a VPC. (b863762b)
  • client-marketplace-entitlement-service: Endpoint update for new region (764e4bf5)
  • client-sagemaker: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. (86804322)
  • client-quicksight: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. (1fb46165)
  • client-sagemaker-runtime-http2: Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints (32887fca)
  • client-lex-models-v2: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. (7338fd92)
  • client-redshift-serverless: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. (e45c0a74)
  • client-lambda: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs (adfe1d80)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.937.0 (2025-11-20)

Features

  • client-s3: Enable / Disable ABAC on a general purpose bucket. (9816b26)

3.936.0 (2025-11-19)

Note: Version bump only for package @​aws-sdk/client-s3

3.935.0 (2025-11-19)

Features

  • client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72)
Commits
  • 1592379 Publish v3.939.0
  • 9981cbc Publish v3.937.0
  • 9816b26 feat(client-s3): Enable / Disable ABAC on a general purpose bucket.
  • a180cc7 Publish v3.936.0
  • c31b14b Publish v3.935.0
  • cee2e72 feat(client-s3): Adds support for blocking SSE-C writes to general purpose bu...
  • ac2be51 chore(codegen): update for smithy/core serde fixes (#7511)
  • See full diff in compare view

Updates @aws-sdk/s3-request-presigner from 3.934.0 to 3.939.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.939.0

3.939.0(2025-11-24)

Chores
  • scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)
New Features
  • client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
  • client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)
Bug Fixes
  • clients: export enum objects for string shapes (#7521) (62f648df)
  • cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)
Tests

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

v3.938.0

3.938.0(2025-11-21)

Chores
  • codegen: smithy-aws-typescript-codegen 0.38.0 (#7513) (cdb4d374)
Documentation Changes
  • client-elastic-load-balancing-v2: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. (d5c668b7)
New Features
  • clients: update client endpoints as of 2025-11-21 (770cf0d9)
  • client-redshift: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. (b030ee0c)
  • client-invoicing: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. (612d1d7c)
  • client-transfer: Adds support for creating Webapps accessible from a VPC. (b863762b)
  • client-marketplace-entitlement-service: Endpoint update for new region (764e4bf5)
  • client-sagemaker: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. (86804322)
  • client-quicksight: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. (1fb46165)
  • client-sagemaker-runtime-http2: Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints (32887fca)
  • client-lex-models-v2: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. (7338fd92)
  • client-redshift-serverless: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. (e45c0a74)
  • client-lambda: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs (adfe1d80)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.937.0 (2025-11-20)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.936.0 (2025-11-19)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.935.0 (2025-11-19)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates marked from 17.0.0 to 17.0.1

Release notes

Sourced from marked's releases.

v17.0.1

17.0.1 (2025-11-20)

Bug Fixes

Commits
  • 16209f5 chore(release): 17.0.1 [skip ci]
  • 921ee22 fix: fix block elements in task item (#3828)
  • 1e47df2 chore(deps-dev): Bump @​semantic-release/npm from 13.1.1 to 13.1.2 (#3841)
  • 8a355d1 chore(deps-dev): Bump @​markedjs/eslint-config from 1.0.13 to 1.0.14 (#3835)
  • c43a67e chore(deps-dev): Bump eslint from 9.39.0 to 9.39.1 (#3834)
  • de635d8 chore(deps-dev): Bump esbuild from 0.25.12 to 0.27.0 (#3833)
  • 554cd8d chore(deps-dev): Bump marked-highlight from 2.2.2 to 2.2.3 (#3832)
  • 1711dbb chore(deps-dev): Bump @​semantic-release/github from 12.0.1 to 12.0.2 (#3831)
  • 23b9d01 docs: Modernize Docs UI with Tailwind, Dark Mode, and Improved Layout (#3814)
  • See full diff in compare view

Updates @cloudflare/vite-plugin from 1.15.0 to 1.15.2

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.15.2

Patch Changes

@​cloudflare/vite-plugin@​1.15.1

Patch Changes

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.15.2

Patch Changes

1.15.1

Patch Changes

Commits
  • 86eab8e Version Packages (#11356)
  • a55c0e4 fix: email method not working in ExportedHandler exports in development (#1...
  • 49eada3 Add cloudflare:node to built-in modules (#11322)
  • 9f3cfc2 Version Packages (#11334)
  • 52ebfa9 fix(vite-plugin-cloudflare): dispose miniflare when preview server is closed ...
  • e5ec8cf Bump the workerd-and-workers-types group with 2 updates (#11318)
  • See full diff in compare view

Updates @cloudflare/workers-types from 4.20251119.0 to 4.20251125.0

Commits

Updates vue-tsc from 3.1.4 to 3.1.5

Release notes

Sourced from vue-tsc's releases.

v3.1.5

Features

  • feat(language-service): support tsconfig path alias resolution for document links (#5562) - Thanks to @​KazariEX!
  • feat(language-server): add serverInfo to initialized result (#5767) - Thanks to @​kada49!

Bug Fixes

  • fix(vscode): correct highlighting of tags starting with template (#5755) - Thanks to @​serkodev and @​KazariEX!
  • fix(language-core): allow loose props checks on generic components (#5748) - Thanks to @​serkodev!
  • fix(language-core): avoid vue-tsc crash during single file checks (#5768) - Thanks to @​KazariEX!
  • fix(language-core): dispose virtual code correctly - Thanks to @​KazariEX!

Performance

  • perf(language-core): skip unnecessary runtime codegen step (#5766) - Thanks to @​KazariEX!

❤️ Thanks to Our Sponsors

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.1.5 (2025-11-23)

Features

  • feat(language-service): support tsconfig path alias resolution for document links (#5562) - Thanks to @​KazariEX!
  • feat(language-server): add serverInfo to initialized result (#5767) - Thanks to @​kada49!

Bug Fixes

  • fix(vscode): correct highlighting of tags starting with template (#5755) - Thanks to @​serkodev and @​KazariEX!
  • fix(language-core): allow loose props checks on generic components (#5748) - Thanks to @​serkodev!
  • fix(language-core): avoid vue-tsc crash during single file checks (#5768) - Thanks to @​KazariEX!
  • fix(language-core): dispose virtual code correctly - Thanks to @​KazariEX!

Performance

  • perf(language-core): skip unnecessary runtime codegen step (#5766) - Thanks to @​KazariEX!
Commits
  • 093e403 v3.1.5 (#5764)
  • c25d7e9 refactor(language-core): rename __VLS_unknownProps to __VLS_PROPS_FALLBACK
  • 342cf3b refactor(language-core): rename unknown props to __VLS_unknownProps for con...
  • 5d841f4 fix(language-core): defineModel for generic component types (#5748)
  • See full diff in compare view

Updates wrangler from 4.49.0 to 4.50.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

  • #11219 524a6e5 Thanks @​Ltadrian! - Implement Hyperdrive binding TLS miniflare proxy. This will allow for wrangler dev hyperdrive bindings to connect to external databases that require TLS.

  • #11233 c922a81 Thanks @​emily-shen! - Add containers.unsafe to allow internal users to use additional container features

Patch Changes

[email protected]

Patch Changes

Commits

Updates @codemirror/autocomplete from 6.19.1 to 6.20.0

Changelog

Sourced from @​codemirror/autocomplete's changelog.

6.20.0 (2025-11-20)

New features

Completions now support a sortText property to influence sort order.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `2.32.0` | `2.33.0` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.7.0` | `3.7.1` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.934.0` | `3.939.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.934.0` | `3.939.0` |
| [marked](https://github.com/markedjs/marked) | `17.0.0` | `17.0.1` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.15.0` | `1.15.2` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20251119.0` | `4.20251125.0` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.1.4` | `3.1.5` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.49.0` | `4.50.0` |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.19.1` | `6.20.0` |


Updates `isomorphic-dompurify` from 2.32.0 to 2.33.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.32.0...2.33.0)

Updates `@vscode/vsce` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v3.7.0...v3.7.1)

Updates `@aws-sdk/client-s3` from 3.934.0 to 3.939.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.939.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.934.0 to 3.939.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.939.0/packages/s3-request-presigner)

Updates `marked` from 17.0.0 to 17.0.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json)
- [Commits](markedjs/marked@v17.0.0...v17.0.1)

Updates `@cloudflare/vite-plugin` from 1.15.0 to 1.15.2
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/[email protected]/packages/vite-plugin-cloudflare)

Updates `@cloudflare/workers-types` from 4.20251119.0 to 4.20251125.0
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/Dockerfile.release)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `vue-tsc` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.1.5/packages/tsc)

Updates `wrangler` from 4.49.0 to 4.50.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

Updates `@codemirror/autocomplete` from 6.19.1 to 6.20.0
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](codemirror/autocomplete@6.19.1...6.20.0)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vscode/vsce"
  dependency-version: 3.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.939.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.939.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: marked
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.15.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 4.20251125.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 25, 2025
@github-actions
Copy link

🚀 Surge Preview has been successfully deployed!

Preview URL: https://doocs-md-preview-pr-1165.surge.sh

Built with commit 3102624

@yanglbme yanglbme closed this Nov 28, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 28, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/main/minor-and-patch-581f97cd7e branch November 28, 2025 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants