chore(deps): bump the minor-and-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #90 · kulla/serlo-editor-prototype

dependabot · 2026-07-17T11:34:51Z

Bumps the minor-and-patch group with 7 updates in the / directory:

Package	From	To
es-toolkit	`1.46.1`	`1.49.0`
prosekit	`0.20.2`	`0.21.4`
react	`19.2.6`	`19.2.7`
react-dom	`19.2.6`	`19.2.7`
yjs	`13.6.30`	`13.6.31`
@playwright/test	`1.60.0`	`1.61.1`
@types/bun	`1.3.13`	`1.3.14`

Updates es-toolkit from 1.46.1 to 1.49.0

Release notes

Sourced from es-toolkit's releases.

v1.49.0

Released on June 26th, 2026.

Added the es-toolkit/fp entrypoint with data-last, pipeable utilities, documentation, benchmarks, and bundle-size checks. ([#1781])

Added a broad set of array utilities to es-toolkit/fp, covering slicing, grouping, set operations, ordering, zipping, and collection helpers. ([#1801])

Fixed trimStart to validate multi-character trim strings correctly before it stops trimming. ([#1615])

Fixed compat/pick to prefer a literal key over a dot-notation path when the picked value is undefined. ([#1775])

Fixed compat/random to better match Lodash behavior for coerced bounds and floating-point options. ([#1767])

Fixed compat/chunk to handle NaN and Infinity size values consistently with Lodash. ([#1797])

Improved documentation and JSDoc accuracy across array, function, and compat references. ([#1785], [#1786], [#1788], [#1790], [#1791], [#1792], [#1793], [#1795], [#1800])

We sincerely thank @Antoliny0919, @D-Sketon, @eunwoo-levi, and @raon0211 for their contributions. We appreciate your great efforts!

v1.48.1

Released on June 21st, 2026.

Fixed the jsdelivr and unpkg CDN <script> entry that regressed in v1.48.0. The fields are now declared at the package root so yarn pack preserves them, since publishConfig only carries standard fields and dropped them. Both CDNs now serve the UMD bundle again.

v1.48.0

Released on June 21st, 2026.

Added AbortSignal support to timeout and withTimeout. ([#1617])

Fixed CDN <script> resolution by pointing jsdelivr/unpkg to the UMD bundle and dropping the misused browser field. ([#1395])

Fixed toMerged to deep clone the target so untouched nested values stay independent. ([#1780])

Fixed compat/toPath to keep empty segments for consecutive and trailing dots. ([#1778])

Fixed compat/difference to treat sparse array holes as undefined. ([#1773])

Fixed compat/parseInt to coerce input to a string before parsing. ([#1771])

Fixed compat/isNaN to improve checks for boxed values and non-numbers. ([#1646])

Fixed compat/isMatchWith to align nested primitive matching with lodash. ([#1647])

We sincerely thank @aidant, @Antoliny0919, @D-Sketon, @miinhho, @MyraxByte, @raon0211, @sarathfrancis90, and @ssi02014 for their contributions. We appreciate your great efforts!

v1.47.1

Released on June 12th, 2026.

Fixed maxBy and minBy to propagate NaN, matching Math.max/Math.min behavior. ([#1749])

Fixed orderBy and sortBy to place null and undefined values last when sorting. ([#1681])

Fixed isNumber to no longer treat boxed Number objects as numbers. ([#1726])

Fixed reduce and reduceRight to respect explicitly passed nullish accumulators. ([#1742])

Fixed isEmpty to handle functions with own enumerable properties. ([#1645])

Fixed the globalThis polyfill to avoid Function(...), supporting CSP environments without unsafe-eval.

Fixed ESM resolution for ./compat/* subpaths in package exports. ([#1757])

Fixed compat/size to count array-like objects by their length. ([#1766])

Fixed compat/round, compat/ceil, and compat/floor to return Infinity for infinite values with precision. ([#1764])

Fixed compat/random to coerce the upper bound for non-number max. ([#1751])

Fixed compat/toLength to coerce non-numeric values to 0. ([#1758])

Removed unused generic type parameters from pull. ([#1746])

We sincerely thank @Amund211, @Antoliny0919, @chatman-media, @D-Sketon, @dayongkr, @JetProc, @parkhojeong, @pbk95120, @raon0211, @sarathfrancis90, @shaked-shlomo, and @sukvvon for their contributions. We appreciate your great efforts!

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.49.0

Released on June 26th, 2026.

Added the es-toolkit/fp entrypoint with data-last, pipeable utilities, documentation, benchmarks, and bundle-size checks. (#1781)

Added a broad set of array utilities to es-toolkit/fp, covering slicing, grouping, set operations, ordering, zipping, and collection helpers. (#1801)

Fixed trimStart to validate multi-character trim strings correctly before it stops trimming. (#1615)

Fixed compat/pick to prefer a literal key over a dot-notation path when the picked value is undefined. (#1775)

Fixed compat/random to better match Lodash behavior for coerced bounds and floating-point options. (#1767)

Fixed compat/chunk to handle NaN and Infinity size values consistently with Lodash. (#1797)

Improved documentation and JSDoc accuracy across array, function, and compat references. (#1785, #1786, #1788, #1790, #1791, #1792, #1793, #1795, #1800)

We sincerely thank @Antoliny0919, @D-Sketon, @eunwoo-levi, and @raon0211 for their contributions. We appreciate your great efforts!

Version v1.48.1

Released on June 21st, 2026.

Fixed the jsdelivr and unpkg CDN <script> entry that regressed in v1.48.0. The fields are now declared at the package root so yarn pack preserves them, since publishConfig only carries standard fields and dropped them. Both CDNs now serve the UMD bundle again.

Version v1.48.0

Released on June 21st, 2026.

Added AbortSignal support to timeout and withTimeout. (#1617)

Fixed CDN <script> resolution by pointing jsdelivr/unpkg to the UMD bundle and dropping the misused browser field. (#1395)

Fixed toMerged to deep clone the target so untouched nested values stay independent. (#1780)

Fixed compat/toPath to keep empty segments for consecutive and trailing dots. (#1778)

Fixed compat/difference to treat sparse array holes as undefined. (#1773)

Fixed compat/parseInt to coerce input to a string before parsing. (#1771)

Fixed compat/isNaN to improve checks for boxed values and non-numbers. (#1646)

Fixed compat/isMatchWith to align nested primitive matching with lodash. (#1647)

We sincerely thank @aidant, @Antoliny0919, @D-Sketon, @miinhho, @MyraxByte, @raon0211, @sarathfrancis90, and @ssi02014 for their contributions. We appreciate your great efforts!

Version v1.47.1

Released on June 12th, 2026.

Fixed maxBy and minBy to propagate NaN, matching Math.max/Math.min behavior. (#1749)

Fixed orderBy and sortBy to place null and undefined values last when sorting. (#1681)

... (truncated)

Commits

c8d3c36 v1.49.0
6b75d8a feat[fp]: add array pipeline utilities (#1801)
ba1686d build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#1802)
18ab50d build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#1803)
90d854c feat(fp): add es-toolkit/fp functional pipeline module (#1781)
75c8841 docs(compat): unify "Lodash Compatibility" headings across reference docs (#1...
0aaf0e6 fix(compat/chunk): handle NaN and Infinity size values for compability (#1797)
e008a28 fix(compat/random): compatibility issues with random function (#1767)
6bbf178 fix(compat/pick): prioritize literal key over dot notation path when value is...
2e9ce80 fix(compat/differenceBy): rename parameter arr to array for consistency (#1786)
Additional commits viewable in compare view

Updates prosekit from 0.20.2 to 0.21.4

Release notes

Sourced from prosekit's releases.

v0.21.4

Please refer to CHANGELOG.md for details.

v0.21.3

Please refer to CHANGELOG.md for details.

v0.21.2

Please refer to CHANGELOG.md for details.

v0.21.1

Please refer to CHANGELOG.md for details.

v0.21.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from prosekit's changelog.

0.21.4

Patch Changes

eb29f6a

Add EditorNode and EditorFragment as aliases for ProseMirror's Node and Fragment.

64f0066

definePasteRule and defineMarkPasteRule can now be imported from prosekit/core.

0.21.3

Patch Changes

097bc7b

Add defineCodeBlockPreviewPlugin() and isCodeBlockPreviewHiddenDecoration() to prosekit/extensions/code-block. A node view for codeBlock can use them to swap between an editable source view and a rendered view based on whether the cursor is inside.

0.21.2

Patch Changes

6fda244

Add font-family extension.

0.21.1

Patch Changes

031c430

Add the extractSelection test utility to prosekit/core/test, which reads the <a>/<b> selection tokens from a tagged ProseMirror document and returns the corresponding Selection.

0.21.0

Minor Changes

8213beb

Add subscript and superscript extensions.

b0327c2

Add highlight extension.

Patch Changes

... (truncated)

Commits

2a16c32 chore: version packages (#1676)
8d60d6f docs: improve README files across packages (#1667)
440c2d5 chore: update dependencies (#1664)
26f7fd9 chore(deps): update dependencies (#1658)
e80b7c0 chore: version packages (#1645)
72ad813 chore: version packages (#1635)
4c12a14 chore: update dependencies (#1638)
6fda244 feat: add font-family mark extension (#1633)
2878840 chore: version packages (#1629)
e5ae195 chore: version packages (#1624)
Additional commits viewable in compare view

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

Commits

6117d7c Version 19.2.7 (#36591)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

Commits

6117d7c Version 19.2.7 (#36591)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates yjs from 13.6.30 to 13.6.31

Release notes

Sourced from yjs's releases.

v13.6.31

Merge branch 'ppiotrowicz-fix/757-undo-attr-redo' into v13 1ddba7e4

fix #757 in v13 d9aaff72

fix undoing setAttribute combined with delete corrupts remote state - closes #757 67c809ee

yjs/yjs@v13.6.30...v13.6.31

Commits

2713308 13.6.31
1ddba7e Merge branch 'ppiotrowicz-fix/757-undo-attr-redo' into v13
d9aaff7 fix #757 in v13
67c809e fix undoing setAttribute combined with delete corrupts remote state - closes ...
See full diff in compare view

Updates @playwright/test from 1.60.0 to 1.61.1

Release notes

Sourced from @playwright/test's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
Additional commits viewable in compare view

Updates @types/bun from 1.3.13 to 1.3.14

Commits

See full diff in compare view

… updates Bumps the minor-and-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [es-toolkit](https://github.com/toss/es-toolkit) | `1.46.1` | `1.49.0` | | [prosekit](https://github.com/prosekit/prosekit/tree/HEAD/packages/prosekit) | `0.20.2` | `0.21.4` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [yjs](https://github.com/yjs/yjs) | `13.6.30` | `13.6.31` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.13` | `1.3.14` | Updates `es-toolkit` from 1.46.1 to 1.49.0 - [Release notes](https://github.com/toss/es-toolkit/releases) - [Changelog](https://github.com/toss/es-toolkit/blob/main/CHANGELOG.md) - [Commits](toss/es-toolkit@v1.46.1...v1.49.0) Updates `prosekit` from 0.20.2 to 0.21.4 - [Release notes](https://github.com/prosekit/prosekit/releases) - [Changelog](https://github.com/prosekit/prosekit/blob/master/packages/prosekit/CHANGELOG.md) - [Commits](https://github.com/prosekit/prosekit/commits/v0.21.4/packages/prosekit) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `yjs` from 13.6.30 to 13.6.31 - [Release notes](https://github.com/yjs/yjs/releases) - [Commits](yjs/yjs@v13.6.30...v13.6.31) Updates `@playwright/test` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `@types/bun` from 1.3.13 to 1.3.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/bun" dependency-version: 1.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: es-toolkit dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prosekit dependency-version: 0.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: yjs dependency-version: 13.6.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026

dependabot Bot changed the title ~~chore(deps): bump the minor-and-patch group with 7 updates~~ chore(deps): bump the minor-and-patch group across 1 directory with 7 updates Jul 17, 2026

dependabot Bot force-pushed the dependabot/bun/minor-and-patch-998710da4a branch from 197a116 to d36d5fd Compare July 17, 2026 15:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates#90

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-998710da4a

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.49.0

v1.48.1

v1.48.0

v1.47.1

Version v1.49.0

Version v1.48.1

Version v1.48.0

Version v1.47.1

v0.21.4

v0.21.3

v0.21.2

v0.21.1

v0.21.0

0.21.4

Patch Changes

0.21.3

Patch Changes

0.21.2

Patch Changes

0.21.1

Patch Changes

0.21.0

Minor Changes

Patch Changes

19.2.7 (June 1st, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

v13.6.31

v1.61.1

Bug Fixes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading