Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 9 updates - #160

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-f6d1b5efc1
Open

chore(deps): bump the production-dependencies group across 1 directory with 9 updates#160
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-f6d1b5efc1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@fontsource-variable/outfit 5.2.8 5.3.0
@tailwindcss/vite 4.3.1 4.3.3
@threlte/core 8.5.16 8.6.0
@threlte/extras 9.21.0 9.21.1
bits-ui 2.18.1 2.19.0
pocketbase 0.27.0 0.28.0
sveltekit-superforms 2.30.1 2.30.2
three 0.176.0 0.185.1
zod 4.4.3 4.5.2

Updates @fontsource-variable/outfit from 5.2.8 to 5.3.0

Commits

Updates @tailwindcss/vite from 4.3.1 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Commits

Updates @threlte/core from 8.5.16 to 8.6.0

Release notes

Sourced from @​threlte/core's releases.

@​threlte/core@​8.6.0

Minor Changes

  • 6d87493: Add @threlte/core/webgpu export
Changelog

Sourced from @​threlte/core's changelog.

8.6.0

Minor Changes

  • 6d87493: Add @threlte/core/webgpu export
Commits

Updates @threlte/extras from 9.21.0 to 9.21.1

Release notes

Sourced from @​threlte/extras's releases.

@​threlte/extras@​9.21.1

Patch Changes

  • cdda0b7: Fix portal insertion order
Changelog

Sourced from @​threlte/extras's changelog.

9.21.1

Patch Changes

  • cdda0b7: Fix portal insertion order
Commits

Updates bits-ui from 2.18.1 to 2.19.0

Release notes

Sourced from bits-ui's releases.

bits-ui@2.19.0

Minor Changes

  • feat(Checkbox): pass form to the hidden input (#2089)

Patch Changes

  • fix(DateField): keep focus on the year while correcting its first digit (#2100)

  • fix(Tooltip): close Tooltip.Trigger on pointerdown for any pointer button so right/middle click dismiss the tooltip and cancel a pending delayed open (#2101)

  • fix(RadioGroup): don't select item on pointer-driven focus- #2098 (#2098)

bits-ui@2.18.2

Patch Changes

  • fix(DismissibleLayer): cancel pending afterSleep timer on destroy to prevent derived_inert and stale document listeners (#2080) (#2087)

  • fix(TextSelectionLayer): don't read the ref box in #pointerdown before the enabled check, which emitted derived_inert on every document pointerdown when a leaked listener outlived its component (#2107)

  • fix(AlertDialog): pass disabled through to button in AlertDialog.Cancel (#2068)

Commits
  • d9cc7cc Version Packages (#2108)
  • d131732 fix(DateField): year backspace clearing (#2100)
  • b78f8cc fix(RadioGroup): don't select item on pointer-driven focus (#2098)
  • eeed982 feat(Checkbox): Pass form prop to the hidden input (#2089)
  • 7196014 fix(Tooltip): close trigger on pointerdown for any pointer button (#2101)
  • cb8c904 Version Packages (#2071)
  • e3254e0 docs: Add missing type import to Slider example (#2104)
  • aa0a18d fix(TextSelectionLayer): avoid reading destroyed ref box on document pointe...
  • 0da43b8 test: fix the two races behind the recurring CI failures (#2102)
  • 0522bd1 fix: cancel DismissibleLayer afterSleep timer on destroy (#2080) (#2087)
  • Additional commits viewable in compare view

Updates pocketbase from 0.27.0 to 0.28.0

Release notes

Sourced from pocketbase's releases.

v0.28.0 Release

  • Added pb.logs.truncate() handler for the new endpoint in the upcoming PocketBase v0.40.0.

v0.27.3 Release

  • Allow undefined (stringified as null) and fixed small regression with the earlier pb.filter() fix that breaks when a plain array or object is passed as param value (this is for the cases when direct json field value comparison is needed).

v0.27.2 Release

  • Fixed pb.filter() error when object with custom toJSON() returning a string is passed as param value.

v0.27.1 Release

  • Fixed realtime data race initial connection handling and added missing subscriptions resubmit as a fallback if all optimizations fail.
Changelog

Sourced from pocketbase's changelog.

0.28.0

  • Added pb.logs.truncate() handler for the new endpoint in the upcoming PocketBase v0.40.0.

0.27.3

  • Allow undefined (stringified as null) and fixed small regression with the earlier pb.filter() fix that breaks when a plain array or object is passed as param value (this is for the cases when direct json field value comparison is needed).

0.27.2

  • Fixed pb.filter() error when object with custom toJSON() returning a string is passed as param value.

0.27.1

  • Fixed realtime data race initial connection handling and added missing subscriptions resubmit as a fallback if all optimizations fail.
Commits
  • 78b4828 added pb.logs.truncate()
  • aebdbae added more tests, allow undefined as param value and fixed plain arr/object s...
  • 2aa0f48 bumped package version
  • f7ef752 fixed pb.filter with custom toJSON
  • 610ede3 updated code comment
  • 3489b84 bumped package version
  • a5f70cf fixed realtime data race initial connection handling
  • See full diff in compare view

Updates sveltekit-superforms from 2.30.1 to 2.30.2

Release notes

Sourced from sveltekit-superforms's releases.

v2.30.2

Security

Changed

  • TypeBox bumped to 1.3.3 to fix an issue with a deprecated type. Many thanks to the TypeBox author sinclairzx81 for the PR!
Changelog

Sourced from sveltekit-superforms's changelog.

[2.30.2] - 2026-07-04

Security

Changed

  • TypeBox bumped to 1.3.3 to fix an issue with a deprecated type. Many thanks to the TypeBox author sinclairzx81 for the PR!
Commits

Updates three from 0.176.0 to 0.185.1

Commits

Updates zod from 4.4.3 to 4.5.2

Release notes

Sourced from zod's releases.

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

z.compile()

You can now pre-compile any Zod schema using z.compile(schema). This dramatically speeds up parsing performance.

import * as z from "zod";
const Player = z.object({
username: z.string(),
bio: z.string(),
xp: z.number(),
// ...20 more properties...
</tr></table>

... (truncated)

Commits
  • 9a193aa 4.5.2
  • 571c8e8 fix(docs): render blog tabs with the stock fumadocs tab card
  • 652bb43 chore(docs): drop the scroll log from the route-change scroller
  • 019ae29 fix(docs): drop ISR on the docs route so the home page hydrates
  • 6635d9d docs(blog): soften the "method memoization" attribution
  • 6c932fc chore: bump devcontainer image to Node 24 (#6470)
  • fedb06f fix(docs): match the blog TOC hover bar to the 2px active indicator
  • e7576f5 docs(blog): let the page show through the navbar in dark mode (#6489)
  • 212b941 fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (...
  • d378c42 ci: drop canary publishing from the release workflow (#6487)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
4d885f8 
…y with 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fontsource-variable/outfit](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/outfit) | `5.2.8` | `5.3.0` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.3` |
| [@threlte/core](https://github.com/threlte/threlte/tree/HEAD/packages/core) | `8.5.16` | `8.6.0` |
| [@threlte/extras](https://github.com/threlte/threlte/tree/HEAD/packages/extras) | `9.21.0` | `9.21.1` |
| [bits-ui](https://github.com/huntabyte/bits-ui) | `2.18.1` | `2.19.0` |
| [pocketbase](https://github.com/pocketbase/js-sdk) | `0.27.0` | `0.28.0` |
| [sveltekit-superforms](https://github.com/ciscoheat/sveltekit-superforms) | `2.30.1` | `2.30.2` |
| [three](https://github.com/mrdoob/three.js) | `0.176.0` | `0.185.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.2` |



Updates `@fontsource-variable/outfit` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/outfit)

Updates `@tailwindcss/vite` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `@threlte/core` from 8.5.16 to 8.6.0
- [Release notes](https://github.com/threlte/threlte/releases)
- [Changelog](https://github.com/threlte/threlte/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/threlte/threlte/commits/@threlte/core@8.6.0/packages/core)

Updates `@threlte/extras` from 9.21.0 to 9.21.1
- [Release notes](https://github.com/threlte/threlte/releases)
- [Changelog](https://github.com/threlte/threlte/blob/main/packages/extras/CHANGELOG.md)
- [Commits](https://github.com/threlte/threlte/commits/@threlte/extras@9.21.1/packages/extras)

Updates `bits-ui` from 2.18.1 to 2.19.0
- [Release notes](https://github.com/huntabyte/bits-ui/releases)
- [Commits](https://github.com/huntabyte/bits-ui/compare/bits-ui@2.18.1...bits-ui@2.19.0)

Updates `pocketbase` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/pocketbase/js-sdk/releases)
- [Changelog](https://github.com/pocketbase/js-sdk/blob/master/CHANGELOG.md)
- [Commits](pocketbase/js-sdk@v0.27.0...v0.28.0)

Updates `sveltekit-superforms` from 2.30.1 to 2.30.2
- [Release notes](https://github.com/ciscoheat/sveltekit-superforms/releases)
- [Changelog](https://github.com/ciscoheat/sveltekit-superforms/blob/main/CHANGELOG.md)
- [Commits](ciscoheat/sveltekit-superforms@v2.30.1...v2.30.2)

Updates `three` from 0.176.0 to 0.185.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `zod` from 4.4.3 to 4.5.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.2)

---
updated-dependencies:
- dependency-name: "@fontsource-variable/outfit"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@threlte/core"
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@threlte/extras"
  dependency-version: 9.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bits-ui
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pocketbase
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sveltekit-superforms
  dependency-version: 2.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: three
  dependency-version: 0.185.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@vercel

vercel Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
shapez-vortex Ready Ready Preview Sep 1, 2026 7:09am UTC

Request Review

This branch was successfully deployed

1 active deployment
Preview — 4d885f8f Deployed Sep 1, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants