Skip to content

Bump the dev-dependencies group with 6 updates - #96

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-15c543e0b8
Open

Bump the dev-dependencies group with 6 updates#96
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-15c543e0b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 6 updates:

Package From To
@lobehub/icons-static-svg 1.98.0 1.101.0
eventsource-parser 4.1.2 4.1.3
tsdown 0.23.1 0.23.2
@types/node 24.19.2 26.6.5
@cloudflare/workers-types 5.20261024.1 5.20261027.1
wrangler 4.152.0 4.153.0

Updates @lobehub/icons-static-svg from 1.98.0 to 1.101.0

Release notes

Sourced from @​lobehub/icons-static-svg's releases.

@​lobehub/icons-static-svg@​1.101.0

Version 1.101.0

Released on 2026-10-26

✨ Features

  • auto: Auto build static icons.

What's improved

  • auto: Auto build static icons (d044bd0)

@​lobehub/icons-static-svg@​1.100.0

Version 1.100.0

Released on 2026-10-25

✨ Features

  • auto: Auto build static icons.

... (truncated)

Changelog

Sourced from @​lobehub/icons-static-svg's changelog.

Changelog

Version 6.13.0

Released on 2026-10-26

✨ Features

  • misc: Add DotHoosh icon, add EmpirioLabs AI icon and provider mapping.

What's improved

  • misc: Add DotHoosh icon, closes #446 (94a0cfe)
  • misc: Add EmpirioLabs AI icon and provider mapping, closes #338 (54fed74)

Version 6.12.0

Released on 2026-10-26

✨ Features

  • auto: Auto build static icons.

🐛 Bug Fixes

  • model: Match BAAI BGE models behind a provider prefix.

What's improved

  • auto: Auto build static icons (b5f7817)

... (truncated)

Commits
  • aea0ecb 🔖 chore(release): @​lobehub/icons-static-svg@​1.101.0 [skip ci]
  • 2c67505 🔖 chore(release): @​lobehub/icons-static-png@​2.5.0 [skip ci]
  • fa2b110 🔖 chore(release): @​lobehub/icons-static-avatar@​2.6.0 [skip ci]
  • c7c61cd 🔖 chore(release): @​lobehub/icons-rn@​2.21.0 [skip ci]
  • d044bd0 ✨ feat(auto): Auto build static icons
  • 1850b95 🔖 chore(release): v6.13.0 [skip ci]
  • 54fed74 ✨ feat: add EmpirioLabs AI icon and provider mapping (#338)
  • 94a0cfe ✨ feat: add DotHoosh icon (#446)
  • eb3e353 🔖 chore(release): @​lobehub/icons-rn@​2.20.1 [skip ci]
  • d80aba4 🔖 chore(release): v6.12.0 [skip ci]
  • Additional commits viewable in compare view

Updates eventsource-parser from 4.1.2 to 4.1.3

Release notes

Sourced from eventsource-parser's releases.

v4.1.3

Patch Changes

  • #47 06e67ff Thanks @​Claire-ovo! - Avoid quadratic scanning of chunks containing many CR-terminated lines or a distant CR after LF-terminated lines.
Changelog

Sourced from eventsource-parser's changelog.

4.1.3

Patch Changes

  • #47 06e67ff Thanks @​Claire-ovo! - Avoid quadratic scanning of chunks containing many CR-terminated lines or a distant CR after LF-terminated lines.
Commits

Updates tsdown from 0.23.1 to 0.23.2

Release notes

Sourced from tsdown's releases.

v0.23.2

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @types/node from 24.19.2 to 26.6.5

Commits

Updates @cloudflare/workers-types from 5.20261024.1 to 5.20261027.1

Commits

Updates wrangler from 4.152.0 to 4.153.0

Release notes

Sourced from wrangler's releases.

wrangler@4.153.0

Minor Changes

  • #14865 c0e915f Thanks @​TheSaiEaranti! - Add an --infer-origin-from-routes flag to wrangler dev

    When a config has routes, local dev infers the origin from the first route, so the Worker sees request.url, the Host header, and any Origin header rewritten to the route's host even though the client connected to localhost. That silently breaks Host/Origin-sensitive logic — for example a CORS check allowlisting http://localhost:* receives http://<route-host> instead and rejects the request only in local dev.

    The inference is intentional and remains the default. Passing --infer-origin-from-routes=false now opts out, preserving the real local origin without removing routes from the config. An explicitly configured --host, --local-upstream, or dev.host continues to take precedence either way. The flag only affects local development: in remote mode the route host still determines the preview session as before.

  • #15955 23ef63a Thanks @​ericclemmons! - Expand dotenv variable references in --secrets-file input

    Dotenv files supplied through --secrets-file to deploy, versions upload, and preview now expand $VAR and ${VAR} references using process values and earlier file values. Process environment values override matching file keys, including explicitly empty values. Treat dotenv secrets files as trusted input: they can read and upload any process environment value, such as a CI credential referenced by X=${GITHUB_TOKEN}. In CI, use secrets files whose contents untrusted contributors cannot modify.

    This changes how existing dotenv secrets files are interpreted: an unset reference becomes an empty string, so PASSWORD=pa$word becomes pa when word is unset. Escape literal dollar signs with a backslash (PASSWORD=pa\$word), or use a JSON secrets file to preserve values exactly. JSON input and bulk-secret commands, including piped stdin, retain their existing literal parsing.

Patch Changes

  • #16403 5f82a56 Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-10-22

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

  • #16437 e651d7c Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-10-23

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

  • #16403 5f82a56 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261019.1 ^5.20261022.1
    workerd 1.20261019.1 1.20261022.1

  • #16437 e651d7c Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261022.1 ^5.20261023.1
    workerd 1.20261022.1 1.20261023.1

  • #16476 8a30d8e Thanks @​tannerlinsley! - Update Undici to 7.30.1 to prevent a malformed HTTP response from crashing development tools

    The updated shared dependency rejects excessive content encodings without leaving an unhandled stream error when the server closes the connection early. This fixes GHSA-xjj6-f33q-929c and keeps the matching Undici types on the same version.

  • #16485 b7e762d Thanks @​Cherry! - Fix the Windows keyring install when the config path contains a space

    On Windows, wrangler login --use-keyring could not set up keyring storage when the configuration path contained a space, such as a C:\Users\John Smith profile, so credentials fell back to the plaintext file. Keyring setup now works for those paths and credentials are stored encrypted.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group with 6 updates
b4a1d67 
Bumps the dev-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@lobehub/icons-static-svg](https://github.com/lobehub/lobe-icons) | `1.98.0` | `1.101.0` |
| [eventsource-parser](https://github.com/rexxars/eventsource-parser) | `4.1.2` | `4.1.3` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.23.1` | `0.23.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.2` | `26.6.5` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20261024.1` | `5.20261027.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.152.0` | `4.153.0` |


Updates `@lobehub/icons-static-svg` from 1.98.0 to 1.101.0
- [Release notes](https://github.com/lobehub/lobe-icons/releases)
- [Changelog](https://github.com/lobehub/lobe-icons/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lobehub/lobe-icons/compare/@lobehub/icons-static-svg@1.98.0...@lobehub/icons-static-svg@1.101.0)

Updates `eventsource-parser` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/rexxars/eventsource-parser/releases)
- [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md)
- [Commits](rexxars/eventsource-parser@v4.1.2...v4.1.3)

Updates `tsdown` from 0.23.1 to 0.23.2
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.1...v0.23.2)

Updates `@types/node` from 24.19.2 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@cloudflare/workers-types` from 5.20261024.1 to 5.20261027.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `wrangler` from 4.152.0 to 4.153.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.153.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@lobehub/icons-static-svg"
  dependency-version: 1.101.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eventsource-parser
  dependency-version: 4.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsdown
  dependency-version: 0.23.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20261027.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: wrangler
  dependency-version: 4.153.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 30, 2026
@dependabot
dependabot Bot requested a review from nightlightmare as a code owner October 30, 2026 04:11
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 30, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nightlightmare nightlightmare Awaiting requested review from nightlightmare nightlightmare is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants