build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #8 · knitkode/kit

dependabot · 2026-10-22T21:57:17Z

Bumps the dev-dependencies group with 8 updates in the / directory:

Package	From	To
@commitlint/cli	`21.2.3`	`21.2.4`
@commitlint/config-conventional	`21.2.3`	`21.2.4`
pkg-pr-new	`0.0.90`	`0.0.91`
tsdown	`0.23.0`	`0.23.1`
turbo	`2.11.7`	`2.11.9`
next	`16.3.8`	`16.4.2`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`

Updates @commitlint/cli from 21.2.3 to 21.2.4

Release notes

Sourced from @commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

fix(load): replace config file arrays with seed arrays by @escapedcat in conventional-changelog/commitlint#5056

fix: update dependency jsonc to v3 by @renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

perf(load): load typescript configs with jiti directly by @escapedcat in conventional-changelog/commitlint#5052

Docs, etc

docs: add AGENTS.md with commit type guidance by @escapedcat in conventional-changelog/commitlint#5053

test(ensure): pin case conversion of digits, punctuation and accents by @escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @commitlint/cli

Commits

d8e3656 v21.2.4
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.3 to 21.2.4

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

fix(load): replace config file arrays with seed arrays by @escapedcat in conventional-changelog/commitlint#5056

fix: update dependency jsonc to v3 by @renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

perf(load): load typescript configs with jiti directly by @escapedcat in conventional-changelog/commitlint#5052

Docs, etc

docs: add AGENTS.md with commit type guidance by @escapedcat in conventional-changelog/commitlint#5053

test(ensure): pin case conversion of digits, punctuation and accents by @escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @commitlint/config-conventional

Commits

d8e3656 v21.2.4
See full diff in compare view

Updates pkg-pr-new from 0.0.90 to 0.0.91

Commits

3cf47a1 release: v0.0.91
See full diff in compare view

Updates tsdown from 0.23.0 to 0.23.1

Release notes

Sourced from tsdown's releases.

v0.23.1

🐞 Bug Fixes

Preserve false tsconfig option - by @Masutayunikon in rolldown/tsdown#1065 (407f8)

entry: Honor custom root for object entry - by @giaBaoJS in rolldown/tsdown#1072 (17452)

pkg: Pack tarball inside npm publish --dry-run - by @giaBaoJS in rolldown/tsdown#1076 (83f0c)

View changes on GitHub

Commits

6493257 chore: release v0.23.1
ba6acb9 chore: upgrade deps
6cbfec7 chore(deps): update dependency unplugin-vue to v8 (#1090)
eb40c95 chore: declare package side effects
f9c95d0 chore: align pnpm workspace settings
e64bde4 chore: configure pnpm via devEngines
83f0c57 fix(pkg): pack tarball inside npm publish --dry-run (#1076)
1745223 fix(entry): honor custom root for object entry (#1072)
9655dcb chore: upgrade deps
30da631 docs: correct default value of minify
Additional commits viewable in compare view

Updates turbo from 2.11.7 to 2.11.9

Release notes

Sourced from turbo's releases.

Turborepo v2.11.9

What's Changed

Changelog

chore: Release Turborepo 2.11.8 by @github-actions[bot] in vercel/turborepo#14789

perf: Prefetch Cargo metadata during lazy graph construction by @anthonyshew in vercel/turborepo#14497

perf: Compute Berry lockfile closures once across workspaces by @anthonyshew in vercel/turborepo#14499

perf: Check cache hit outputs in place instead of on the blocking pool by @anthonyshew in vercel/turborepo#14524

perf: Speed up Berry lockfile loading by @anthonyshew in vercel/turborepo#14500

perf: Parse bun.lock without building a JSON syntax tree by @anthonyshew in vercel/turborepo#14502

perf: Skip the dry run cache batch window when there is no remote cache by @anthonyshew in vercel/turborepo#14505

perf: Emit lockfile closures pre-sorted and cheapen closure interning by @anthonyshew in vercel/turborepo#14525

perf: Reuse configuration derived from turbo.json between the shim and the CLI by @anthonyshew in vercel/turborepo#14521

feat: Report locked tools-only setup plans by @anthonyshew in vercel/turborepo#14483

perf: Compute Bun lockfile closures once across workspaces by @anthonyshew in vercel/turborepo#14501

perf: Reuse open parent directories when restoring cache archives by @anthonyshew in vercel/turborepo#14506

perf: Skip dropping the run right before turbo run exits by @anthonyshew in vercel/turborepo#14507

perf: Match literal input exclusions without compiling globs by @anthonyshew in vercel/turborepo#14510

perf: Copy pruned package files in parallel by @anthonyshew in vercel/turborepo#14512

feat: Report proposed first-lock and refresh setup plans by @anthonyshew in vercel/turborepo#14571

perf: Compress large cache archives with multithreaded zstd by @anthonyshew in vercel/turborepo#14698

perf: Read tracked file stats from directory listings on Windows by @anthonyshew in vercel/turborepo#14633

perf: Diff changed lockfile resolutions with a merge instead of ordered sets by @anthonyshew in vercel/turborepo#14630

perf: Write dry run text output through one buffered stdout handle by @anthonyshew in vercel/turborepo#14625

perf: Parse pnpm-workspace.yaml once per command by @anthonyshew in vercel/turborepo#14620

perf: Write each file trace error to stderr in a single call by @anthonyshew in vercel/turborepo#14618

perf: Reuse glob validation results when re-validating turbo.json in the language server by @anthonyshew in vercel/turborepo#14615

perf: Keep git subprocesses off the critical path of dry runs by @anthonyshew in vercel/turborepo#14610

perf: Classify watch file changes when they arrive instead of on a 100ms poll by @anthonyshew in vercel/turborepo#14600

perf: Buffer TUI raw-output spool writes by @anthonyshew in vercel/turborepo#14597

perf: Add the turbo query version key without re-parsing the response by @anthonyshew in vercel/turborepo#14592

perf: Replay cached task logs in whole-line chunks by @anthonyshew in vercel/turborepo#14590

perf: Write each boundaries diagnostic to stderr in a single call by @anthonyshew in vercel/turborepo#14587

perf: Walk leading-globstar input trees in parallel without wax by @anthonyshew in vercel/turborepo#14511

perf: Reuse open parent directories when writing cache archives by @anthonyshew in vercel/turborepo#14513

perf: Index Bun lockfile subgraph lookups instead of rescanning all packages by @anthonyshew in vercel/turborepo#14514

perf: Render the pruned lockfile while package files are copied by @anthonyshew in vercel/turborepo#14515

feat: Resolve exact native npm lock cohorts by @anthonyshew in vercel/turborepo#14484

perf: Batch prefixed task output into one write per chunk by @anthonyshew in vercel/turborepo#14588

perf: Share one allocation per external package identity by @anthonyshew in vercel/turborepo#14528

perf: Remove quadratic package-name scan from microfrontends discovery by @anthonyshew in vercel/turborepo#14527

perf: Render file trace errors on several threads by @anthonyshew in vercel/turborepo#14623

perf: Check boundaries packages in parallel again by @anthonyshew in vercel/turborepo#14598

perf: Read PTY child output in 8 KiB chunks by @anthonyshew in vercel/turborepo#14594

perf: Load each package's tsconfig once when checking boundaries by @anthonyshew in vercel/turborepo#14589

perf: Skip the file watcher round trip when checking outputs for new task hashes by @anthonyshew in vercel/turborepo#14626

perf: Refresh only memory stats in turbo info by @anthonyshew in vercel/turborepo#14593

perf: Walk and record prune copy plans in parallel by @anthonyshew in vercel/turborepo#14522

feat: Reconcile sealed clone-local setup selections by @anthonyshew in vercel/turborepo#14485

... (truncated)

Commits

64d5e48 publish 2.11.9 to registry
78b039e fix(cache): Parallelize dry-run HEAD fallback (#14801)
6834819 docs: Use .NET in the multi-language guide (#14793)
679efb8 refactor: Remove setup lifecycle script controls (#14818)
9c90852 fix: Allow native package manager configuration during setup (#14816)
a3bcc4a chore: Release Turborepo 2.11.9-canary.1 (#14817)
9328416 fix: Stop installing the Unix shell hook automatically (#14813)
74c9fbc fix: Attribute Cargo.lock changes to the crates whose dependencies changed (#...
a3ef52a chore: Update with-changesets example (#14638)
f05411f perf: Skip newline normalization copies for already-normalized TUI output (#1...
Additional commits viewable in compare view

Updates next from 16.3.8 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 8 updates Bumps the dev-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.3` | `21.2.4` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.3` | `21.2.4` | | [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.90` | `0.0.91` | | [tsdown](https://github.com/rolldown/tsdown) | `0.23.0` | `0.23.1` | | [turbo](https://github.com/vercel/turborepo) | `2.11.7` | `2.11.9` | | [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | Updates `@commitlint/cli` from 21.2.3 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.3 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/config-conventional) Updates `pkg-pr-new` from 0.0.90 to 0.0.91 - [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.91/packages/cli) Updates `tsdown` from 0.23.0 to 0.23.1 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.23.0...v0.23.1) Updates `turbo` from 2.11.7 to 2.11.9 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.7...v2.11.9) Updates `next` from 16.3.8 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.8...v16.4.2) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 21.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: pkg-pr-new dependency-version: 0.0.91 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: tsdown dependency-version: 0.23.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: turbo dependency-version: 2.11.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: next dependency-version: 16.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-22T21:57:39Z

⚠️ No Changeset found

Latest commit: 2436be8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

pkg-pr-new · 2026-10-22T21:57:59Z

Open in StackBlitz

@knitkode/api

pnpm add https://pkg.pr.new/@knitkode/api@8

npm i https://pkg.pr.new/@knitkode/api@8

@knitkode/browser

pnpm add https://pkg.pr.new/@knitkode/browser@8

npm i https://pkg.pr.new/@knitkode/browser@8

@knitkode/dom

pnpm add https://pkg.pr.new/@knitkode/dom@8

npm i https://pkg.pr.new/@knitkode/dom@8

@knitkode/node

pnpm add https://pkg.pr.new/@knitkode/node@8

npm i https://pkg.pr.new/@knitkode/node@8

@knitkode/react

pnpm add https://pkg.pr.new/@knitkode/react@8

npm i https://pkg.pr.new/@knitkode/react@8

@knitkode/utils

pnpm add https://pkg.pr.new/@knitkode/utils@8

npm i https://pkg.pr.new/@knitkode/utils@8

commit: 2436be8

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026

Navigation Menu

Repository navigation

build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #8

build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-4399843102

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

github-actions Bot commented Oct 22, 2026

Uh oh!

pkg-pr-new Bot commented Oct 22, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

21.2.4 (2026-10-18)

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

21.2.4 (2026-10-18)

v0.23.1

🐞 Bug Fixes

View changes on GitHub

Turborepo v2.11.9

What's Changed

Changelog

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

Misc Changes

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

Uh oh!

github-actions Bot commented Oct 22, 2026

⚠️ No Changeset found

Uh oh!

pkg-pr-new Bot commented Oct 22, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants