chore(deps): bump the docs-app-dependencies group in /docs-app with 7 updates by dependabot[bot] · Pull Request #118 · HDCharts/charts-docs

dependabot · 2026-11-01T18:36:54Z

Bumps the docs-app-dependencies group in /docs-app with 7 updates:

Package	From	To
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
shiki	`4.4.3`	`4.5.0`
@types/node	`26.6.3`	`26.6.6`
eslint	`10.11.0`	`10.13.0`
eslint-config-next	`16.3.6`	`16.4.3`
postcss	`8.5.28`	`8.5.32`

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates shiki from 4.4.3 to 4.5.0

Release notes

Sourced from shiki's releases.

v4.5.0

   🚀 Features

Emit an explicit color level from codeToANSI - by @EvanProgramming in shikijs/shiki#1320 (b968e)

transformers:

Add classActiveCode option to transformerNotationWordHighlight - by @curiouscoder-cmd in shikijs/shiki#1201 (1e968)

Add transformerRenderLineNumber - by @Divyapahuja31 and DIVYA PAHUJA in shikijs/shiki#1238 (02f05)

   🐞 Bug Fixes

cli:

Fall back to 'text' when file/URL has no extension and no -… - by @VeerShah41 in shikijs/shiki#1248 (c00e5)

Fall back to plaintext for unknown languages - by @Jinjiang and @antfubot in shikijs/shiki#1319 (4eb7c)

primitive:

Dispose wasm memory for lazily embedded langs - by @rgodha24 in shikijs/shiki#1322 (b5423)

Dedupe grammar injections on repeated language loads - by @antlio and @antfubot in shikijs/shiki#1318 (33678)

stream:

Compile Solid renderer with babel-preset-solid - by @BetterAndBetterII and @antfu in shikijs/shiki#1309 (8724e)

transformers:

Keep notations on content comment lines - by @tianrking in shikijs/shiki#1308 (d25ab)

Handle split # and -- comments in rose-pine theme - by @anandghegde in shikijs/shiki#1317 (63e6d)

twoslash:

Avoid crash when @errors nodes land past EOF - by @Yahiro025, @cursoragent and @antfubot in shikijs/shiki#1316 (5c919)

   🏎 Performance

engine-js: Reuse each regex's last search while tokenizing a line - by @issacgerges and @antfu in shikijs/shiki#1314 (2ef5e)

stream: Group tokens by line in the React renderer - by @CNSeniorious000 in shikijs/shiki#1311 (81200)

vitepress-twoslash: Replace lz-string with lz-string-es - by @antfubot in shikijs/shiki#1324 (2e170)

    View changes on GitHub

Commits

f7d0167 chore: release v4.5.0
See full diff in compare view

Updates @types/node from 26.6.3 to 26.6.6

Commits

See full diff in compare view

Updates eslint from 10.11.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)

a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)

66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)

43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])

95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)

317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)

b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)

47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])

e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)

4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)

bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)

efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)

93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)

02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)

b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)

69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)

686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)

5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)

8816c1d docs: Update README (GitHub Actions Bot)

3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)

b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])

bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)

322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)

d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])

29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])

39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

4637f98 10.13.0
96df05c Build: changelog update for 10.13.0
4783a68 docs: Update README
b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
317fcb3 chore: update ecosystem plugins (#21409)
48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
43f0ac9 docs: clarify parameter description in getText (#21287)
a39d9fb feat: add globalThis to no-obj-calls (#21382)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
Additional commits viewable in compare view

Updates eslint-config-next from 16.3.6 to 16.4.3

Release notes

Sourced from eslint-config-next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

... (truncated)

Commits

29bbeab v16.4.3
2864b17 v16.4.2
7217011 v16.4.1
e273d5b v16.4.0
c3e76ad v16.4.0-canary.63
ccf8c15 v16.4.0-canary.62
27ee721 v16.4.0-canary.61
907721a eslint-config-next: support ESLint 10 (#99628)
cdf6866 v16.4.0-canary.60
ba80ee4 v16.4.0-canary.59
Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

Fixed Input#origin() without opts.from (by @wleeaf).

Fixed final-word lookup without source offsets (by @Don-Yin).

Fixed explicit start in Warning#toString() (by @Don-Yin).

Fixed Promise semantics in LazyResult#finally() (by @Don-Yin).

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.32

Fixed Input#origin() without opts.from (by @wleeaf).

Fixed final-word lookup without source offsets (by @Don-Yin).

Fixed explicit start in Warning#toString() (by @Don-Yin).

Fixed Promise semantics in LazyResult#finally() (by @Don-Yin).

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Commits

2455ac8 Release 8.5.32 version
e367106 Update dependencies
f70f586 Fix Input#origin() without from or with relative sourceRoot (#2179)
eb28619 Fix final-word lookup without source offsets (#2178)
095654b Preserve explicit start in Warning#toString() (#2177)
9b3d8b8 Preserve Promise semantics in result finally() (#2176)
d190857 Release 8.5.31 version
4ef6d8c Update dependencies
6abd674 Call the builder with every node when the output is escaped (#2175)
f1aca7e Release 8.5.30 version
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the docs-app-dependencies group in /docs-app with 7 updates: | Package | From | To | | --- | --- | --- | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.3` | `4.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.6` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.13.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.6` | `16.4.3` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.32` | Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `shiki` from 4.4.3 to 4.5.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.5.0/packages/shiki) Updates `@types/node` from 26.6.3 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.11.0 to 10.13.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.13.0) Updates `eslint-config-next` from 16.3.6 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next) Updates `postcss` from 8.5.28 to 8.5.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.32) --- updated-dependencies: - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs-app-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs-app-dependencies - dependency-name: shiki dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docs-app-dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: docs-app-dependencies - dependency-name: eslint dependency-version: 10.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: docs-app-dependencies - dependency-name: eslint-config-next dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: docs-app-dependencies - dependency-name: postcss dependency-version: 8.5.32 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: docs-app-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-11-01T18:36:57Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
charts.hdcode.dev	Ready	Preview	Nov 1, 2026 6:37pm UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026

vercel Bot deployed to Preview November 1, 2026 18:37

View deployment

hdcodedev merged commit 041f90f into main Nov 1, 2026
3 checks passed

hdcodedev deleted the dependabot/npm_and_yarn/docs-app/docs-app-dependencies-09c063b0c1 branch November 1, 2026 22:41

Navigation Menu

Repository navigation

chore(deps): bump the docs-app-dependencies group in /docs-app with 7 updates - #118

chore(deps): bump the docs-app-dependencies group in /docs-app with 7 updates#118
hdcodedev merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs-app/docs-app-dependencies-09c063b0c1

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

vercel Bot commented Nov 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

v4.5.0

🚀 Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v10.13.0

Features

Bug Fixes

Documentation

Chores

v10.12.0

Features

Bug Fixes

Documentation

Chores

v16.4.3

Core Changes

Credits

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

8.5.32

8.5.31

8.5.30

8.5.29

8.5.32

8.5.31

8.5.30

8.5.29

Uh oh!

vercel Bot commented Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Nov 1, 2026 •

edited

Loading