Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the production-dependencies group with 7 updates:

Package From To
globby 15.0.0 16.0.0
mdast-util-to-hast 13.2.0 13.2.1
pixi.js 8.14.0 8.14.3
rimraf 6.1.0 6.1.2
workerpool 10.0.0 10.0.1
@types/node 24.10.0 24.10.1
@types/yargs 17.0.34 17.0.35

Updates globby from 15.0.0 to 16.0.0

Release notes

Sourced from globby's releases.

v16.0.0

Breaking

  • Respect parent .gitignore files when gitignore option is enabled b9a9a84
    • When {gitignore: true}, Globby now searches for .gitignore files up to the Git repo root (if detected). This matches Git's actual behavior where parent .gitignore patterns apply to subdirectories. Previously, only .gitignore files within the glob search path were considered. This change could break existing code that relied on the previous, more limited behavior.

Improvements

  • Support negation-only patterns 1273541
  • Respect custom fs implementation from options c2eb272
  • Add some more options to isGitIgnored functions e794ff9
  • Improve error message for invalid cwd option 7535e6d

Fixes

  • Fix {gitignore: true} performance issue fcb07c3
  • Fix bundler compatibility e6c72c9
  • Fix parent directory patterns with gitignore option 11dd2df
  • Fix ignore patterns with parent directory references a58d117
  • Fix types for stats option c10f600

sindresorhus/globby@v15.0.0...v16.0.0

Commits
  • cdbb6a2 16.0.0
  • e6c72c9 Fix bundler compatibility
  • b9a9a84 Respect parent .gitignore files when gitignore option is enabled
  • db9cb72 Add test for suppressErrors option with file patterns
  • 69e0ee7 Add test for ignore option with trailing slashes
  • 11dd2df Fix parent directory patterns with gitignore option
  • e4d0918 Add tests for special characters in directory names
  • f926132 Improve path check in gitignore logic
  • 7535e6d Improve error message for invalid cwd option
  • c10f600 Fix types for stats option
  • Additional commits viewable in compare view

Updates mdast-util-to-hast from 13.2.0 to 13.2.1

Release notes

Sourced from mdast-util-to-hast's releases.

13.2.1

Fix

  • ab3a795 Fix support for spaces in class names

Types

  • efb5312 Refactor to use @imports
  • a5bc210 Add declaration maps

Full Changelog: syntax-tree/mdast-util-to-hast@13.2.0...13.2.1

Commits

Updates pixi.js from 8.14.0 to 8.14.3

Release notes

Sourced from pixi.js's releases.

v8.14.3

💾 Download

Installation:

npm install [email protected]

Development Build:

Production Build:

Documentation:

Changed

pixijs/pixijs@v8.14.2...v8.14.3

🐛 Fixed

v8.14.2

💾 Download

Installation:

npm install [email protected]

Development Build:

Production Build:

Documentation:

Changed

pixijs/pixijs@v8.14.1...v8.14.2

🐛 Fixed

... (truncated)

Commits
  • e17c886 v8.14.3
  • ded9a15 fix(Application): Only create stage Container on init if it doesn't exist (#1...
  • 506a83c v8.14.2
  • 40a000c fix: parse resolution and format from URLs in object sources in assets resolv...
  • 643f966 fix: Track item count in Pool class and add related tests (#11760)
  • e15d113 fix: bitmanFontXMLParser should recognize xml fonts with versions (#11761)
  • 580558c Remove listener from TextureSource on Texture destroy (#11764)
  • 620d2d8 Fix typo in Application example: replace '-' with '=' in asset loading (#11750)
  • a3b5cf1 fix: graphics memory leak and cleanup (#11753)
  • 5eda7c7 fix: correct uBackTexture binding for filters with blendRequired (#11754)
  • Additional commits viewable in compare view

Updates rimraf from 6.1.0 to 6.1.2

Commits

Updates workerpool from 10.0.0 to 10.0.1

Changelog

Sourced from workerpool's changelog.

2025-11-19, version 10.0.1

  • Fix: #523 make WorkerHandler resilient against errors without message property.
Commits
  • f4ed802 chore: publish v10.0.1
  • a981946 chore: update devDependencies
  • 93b3ba9 fix: #523 make WorkerHandler resilient against errors without message
  • 9f86578 chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#525)
  • a95a9ed chore(deps): bump glob from 10.4.5 to 10.5.0 (#524)
  • See full diff in compare view

Updates @types/node from 24.10.0 to 24.10.1

Commits

Updates @types/yargs from 17.0.34 to 17.0.35

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [globby](https://github.com/sindresorhus/globby) | `15.0.0` | `16.0.0` |
| [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) | `13.2.0` | `13.2.1` |
| [pixi.js](https://github.com/pixijs/pixijs) | `8.14.0` | `8.14.3` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.1.0` | `6.1.2` |
| [workerpool](https://github.com/josdejong/workerpool) | `10.0.0` | `10.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.10.1` |
| [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.34` | `17.0.35` |


Updates `globby` from 15.0.0 to 16.0.0
- [Release notes](https://github.com/sindresorhus/globby/releases)
- [Commits](sindresorhus/globby@v15.0.0...v16.0.0)

Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1
- [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases)
- [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1)

Updates `pixi.js` from 8.14.0 to 8.14.3
- [Release notes](https://github.com/pixijs/pixijs/releases)
- [Commits](pixijs/pixijs@v8.14.0...v8.14.3)

Updates `rimraf` from 6.1.0 to 6.1.2
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.1.0...v6.1.2)

Updates `workerpool` from 10.0.0 to 10.0.1
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.0...v10.0.1)

Updates `@types/node` from 24.10.0 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/yargs` from 17.0.34 to 17.0.35
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs)

---
updated-dependencies:
- dependency-name: globby
  dependency-version: 16.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: mdast-util-to-hast
  dependency-version: 13.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: pixi.js
  dependency-version: 8.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: rimraf
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: workerpool
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/yargs"
  dependency-version: 17.0.35
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 24, 2025
@jeandet jeandet merged commit b10ca67 into v4 Nov 24, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-6aaa44b87d branch November 24, 2025 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants