Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates#33

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-c3ee9133e6
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates#33
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-c3ee9133e6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026 •
edited
Loading

Bumps the development-dependencies group with 7 updates in the / directory:

Package From To
@openai/codex 0.118.0 0.120.0
@types/node 25.5.2 25.6.0
@vitejs/plugin-react 5.1.3 6.0.1
electron 39.5.1 41.2.0
typescript 5.9.3 6.0.2
vite 7.3.1 8.0.8
wait-on 9.0.4 9.0.5

Updates @openai/codex from 0.118.0 to 0.120.0

Release notes

Sourced from @​openai/codex's releases.

0.120.0

New Features

  • Realtime V2 can now stream background agent progress while work is still running and queue follow-up responses until the active response completes (#17264, #17306)
  • Hook activity in the TUI is easier to scan, with live running hooks shown separately and completed hook output kept only when useful (#17266)
  • Custom TUI status lines can include the renamed thread title (#17187)
  • Code-mode tool declarations now include MCP outputSchema details so structured tool results are typed more precisely (#17210)
  • SessionStart hooks can distinguish sessions created by /clear from fresh startup or resume sessions (#17073)

Bug Fixes

  • Fixed Windows elevated sandbox handling for split filesystem policies, including read-only carveouts under writable roots (#14568)
  • Fixed sandbox permission handling for symlinked writable roots and carveouts, preventing failures in shell and apply_patch workflows (#15981)
  • Fixed codex --remote wss://... panics by installing the Rustls crypto provider before TLS websocket connections (#17288)
  • Preserved tool search result ordering instead of alphabetically reordering results (#17263)
  • Fixed live Stop-hook prompts so they appear immediately instead of only after thread history reloads (#17189)
  • Fixed app-server MCP cleanup on disconnect so unsubscribed threads and resources are torn down correctly (#17223)

Documentation

  • Documented the elevated vs restricted-token Windows sandbox support split in the core README (#14568)
  • Updated app-server protocol documentation for the new /clear SessionStart source (#17073)

Chores

  • Made rollout recording more reliable by retrying failed flushes and surfacing durability failures instead of dropping buffered items (#17214)
  • Added analytics schemas and metadata wiring for compaction and Guardian review events (#17155, #17055)
  • Improved Guardian follow-up efficiency by sending transcript deltas instead of repeatedly resending full history (#17269)
  • Added stable Guardian review IDs across app-server events and internal approval state (#17298)

Changelog

Full Changelog: openai/codex@rust-v0.119.0...rust-v0.120.0

... (truncated)

Commits

Updates @types/node from 25.5.2 to 25.6.0

Commits

Updates @vitejs/plugin-react from 5.1.3 to 6.0.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },


}),


react(),
babel({

 presets: [reactCompilerPreset()]



</tr></table>

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },



</tr></table>

... (truncated)

Commits
  • 1e94c06 release: plugin-react@6.0.1
  • 77c00c0 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1146)
  • dcc9012 release: plugin-react@6.0.0
  • 3a17886 docs: add a link to the Oxlint rule for component exports alongside the ESLin...
  • f812135 fix(deps): update all non-major dependencies (#1140)
  • a0329a0 docs(react): clarify react compiler preset filter (#1137)
  • 704e0d3 release: plugin-react@6.0.0-beta.0
  • ac16acc feat(react)!: remove babel (#1123)
  • f01b30c fix(deps): update all non-major dependencies (#1127)
  • b1014bd chore(react): add changelog for #1124
  • Additional commits viewable in compare view

Updates electron from 39.5.1 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

  • Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

  • BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
  • Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
  • Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
  • Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
  • Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
  • Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
  • Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
  • Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
  • Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

  • Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

  • Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
  • Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

  • Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

  • Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
  • Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

  • Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
  • Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
  • Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
  • Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
  • Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

  • Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits
  • 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
  • d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
  • 6f1d53a ci: make src-cache upload atomic (#50750)
  • fb150b2 docs: link menu type references (#50752)
  • c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
  • 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
  • 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
  • 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
  • ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
  • 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
  • Additional commits viewable in compare view

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits

Updates vite from 7.3.1 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

Bug Fixes

  • avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
  • ssr: class property keys hoisting matching imports (#22199) (e137601)

8.0.7 (2026-04-07)

Bug Fixes

  • use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

8.0.6 (2026-04-07)

Features

Bug Fixes

Performance Improvements

  • early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

8.0.5 (2026-04-06)

Bug Fixes

  • apply server.fs check to env transport (#22159) (f02d9fd)
  • avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
  • check server.fs after stripping query as well (#22160) (a9a3df2)
  • disallow referencing files outside the package from sourcemap (#22158) (f05f501)

8.0.4 (2026-04-06)

Features

  • allow esbuild 0.28 as peer deps (#22155) (b0da973)
  • hmr: truncate list of files on hmr update (#21535) (d00e806)
  • optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

... (truncated)

Commits

Updates wait-on from 9.0.4 to 9.0.5

Release notes

Sourced from wait-on's releases.

v9.0.5

Update minor dependencies and npm audit fixes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the development-dependencies group across 1 dir…
2d4060c 
…ectory with 7 updates

Bumps the development-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@openai/codex](https://github.com/openai/codex/tree/HEAD/codex-cli) | `0.118.0` | `0.120.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.3` | `6.0.1` |
| [electron](https://github.com/electron/electron) | `39.5.1` | `41.2.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.8` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.0.4` | `9.0.5` |



Updates `@openai/codex` from 0.118.0 to 0.120.0
- [Release notes](https://github.com/openai/codex/releases)
- [Commits](https://github.com/openai/codex/commits/rust-v0.120.0/codex-cli)

Updates `@types/node` from 25.5.2 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 5.1.3 to 6.0.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react)

Updates `electron` from 39.5.1 to 41.2.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v39.5.1...v41.2.0)

Updates `typescript` from 5.9.3 to 6.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

Updates `vite` from 7.3.1 to 8.0.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite)

Updates `wait-on` from 9.0.4 to 9.0.5
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.0.4...v9.0.5)

---
updated-dependencies:
- dependency-name: "@openai/codex"
  dependency-version: 0.120.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: electron
  dependency-version: 41.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: wait-on
  dependency-version: 9.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants