⬆️ Bump the minor-updates group with 8 updates

[dependabot]

Bumps the minor-updates group with 8 updates:

Package	From	To
electron	43.1.0	43.1.1
i18next-cli	1.65.0	1.66.2
immer	11.1.11	11.1.15
material-symbols	0.45.7	0.45.8
react-colorful	5.7.0	5.8.0
simple-icons-font	16.26.0	16.27.0
typescript-eslint	8.63.0	8.64.0
ws	8.21.0	8.21.1

Updates electron from 43.1.0 to 43.1.1

Release notes

Sourced from electron's releases.

electron v43.1.1

Release Notes for v43.1.1

Fixes

• Fixed a browser-process crash (ValidateIntegrityOrDie) and spurious preload ENOENT errors when an app's app.asar is replaced on disk (e.g. by an updater or MDM software) while the app is running. #52293 (Also in 42, 44)

Other Changes

• Updated Chromium to 150.0.7871.114. #52297

Commits

• 49dacb7 chore: bump chromium to 150.0.7871.114 (43-x-y) (#52297)
• 3ece4d2 ci: fail gha-done when checkout jobs fail (#52250)
• ec31a73 fix: read asar contents through the archive's retained file handle (#52293)
• 155287d docs(mas): update security scoped bookmarks link (#52281)
• a8bb2f1 chore: bump chromium to 150.0.7871.101 (43-x-y) (#52285)
• See full diff in compare view

Updates i18next-cli from 1.65.0 to 1.66.2

Changelog

Sourced from i18next-cli's changelog.

1.66.2

• fix(extract): ignore <Trans> components that have neither an i18nKey expression nor non-whitespace children, preventing <Trans /> and spread-only variants from creating an empty-string translation key (#274).

1.66.1

• fix(logger): ConsoleLogger.warn/error no longer swallow their optional second argument — plugin-hook failures (e.g. Plugin my-plugin onVisitNode failed:) now print the caught error instead of a bare message (#273, thanks @​pjrobertson).

1.66.0

• fix(funnel): never print locize funnel/tip messages in non-interactive contexts — they are now suppressed when CI=true or stdout is not a TTY, and the once-per-24h cooldown applies unconditionally (newly created translation files no longer bypass it). CI pipelines and first extractions no longer get promotional output (follow-up to #20 / #222).
• feat(extract): new sort: 'locize' preset that mirrors the key order of locize-published files (plain UTF-16 code-unit sort, case-sensitive, no canonical plural-form reordering), making extract followed by locize-sync/locize-download round-trip without spurious reorder diffs (follow-up to #106).
• test(locize): assert --cdn-type is forwarded to download and migrate, guarding against the #156 class of regression.
• docs(readme): new "Dynamic Keys" section documenting the built-in TS type-aware resolution of finite dynamic keys shipped in v1.49 (#210) with preservePatterns reserved for truly runtime-dynamic keys; note in migrate-config that i18next-cli requires Node.js >= 22 (i18next-parser still supported Node 18/20).

Commits

• 34f2b96 1.66.2
• 6761334 fix(extract): skip empty Trans component keys (#274)
• 66acdcb 1.66.1
• 8a5a136 fix(logger): simplify error signature to unknown; changelog for 1.66.1 (#273)
• cada9ca Allow passing extra args (e.g. exceptions to the logger warn/error) (#273)
• 6555ff0 docs: Code-Splitting Translations section (one namespace per route, lazy chun...
• 69bb996 1.66.0
• d94a146 feat(extract): sort: 'locize' preset for locize round-trip key order (#106); ...
• 3a278ee fix(funnel): suppress promotional output in CI/non-TTY and always respect the...
• 8c69ab9 docs: surface localize --print-agent-prompt in the top callout
• See full diff in compare view

Updates immer from 11.1.11 to 11.1.15

Release notes

Sourced from immer's releases.

v11.1.15

11.1.15 (2026-07-16)

Bug Fixes

• correct curried produceWithPatches return type (#1249) (a3be9df), closes #1045

v11.1.14

11.1.14 (2026-07-16)

Bug Fixes

• throw proper immer error when applyPatches path traverses null (#1251) (e38ad71)

v11.1.13

11.1.13 (2026-07-16)

Bug Fixes

• draft relocated base refs after reverse/sort in array-methods plugin (#1255) (a73672a)

v11.1.12

11.1.12 (2026-07-16)

Bug Fixes

• Revert "prevent prototype pollution via constructor.prototype access (CVE-2026-XXXX) (#1259)" (#1271) (4d3d6ff), closes #1266 #1268 #1265

Commits

• a3be9df fix: correct curried produceWithPatches return type (#1249)
• 7cab3c2 ci: harden GitHub Actions workflows (SHA-pin, permissions, persist-credential...
• e38ad71 fix: throw proper immer error when applyPatches path traverses null (#1251)
• 8bc4b2d docs: add Zenith and DOMD to Built with Immer (#1245)
• a73672a fix: draft relocated base refs after reverse/sort in array-methods plugin (#1...
• cfec5e5 chore(deps-dev): bump @​babel/core from 7.21.4 to 7.29.6 (#1254)
• e4f5923 chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (#1270)
• 4d3d6ff fix: Revert "prevent prototype pollution via constructor.prototype access (CV...
• See full diff in compare view

Updates material-symbols from 0.45.7 to 0.45.8

Commits

• 91caec4 0.45.8
• 6524b11 Auto Update
• See full diff in compare view

Updates react-colorful from 5.7.0 to 5.8.0

Release notes

Sourced from react-colorful's releases.

v5.8.0 (Shadow DOM support)

The picker now works inside Shadow DOM. When mounted inside a shadow tree, the component injects its styles into the closest ShadowRoot instead of the document <head>, so it renders correctly in web components and other shadow-DOM-based setups. No API changes required — it just works. (via #232)

Changelog

Sourced from react-colorful's changelog.

5.8.0

• Shadow DOM support: the picker now injects its styles into the closest ShadowRoot when rendered inside one (via #232)

Commits

• d914e76 5.8.0
• a3ff6d4 Inject styles into the closest ShadowRoot when mounted inside one (#232)
• ddd22b1 Create CLAUDE.md
• See full diff in compare view

Updates simple-icons-font from 16.26.0 to 16.27.0

Release notes

Sourced from simple-icons-font's releases.

Release 16.27.0

See https://github.com/simple-icons/simple-icons/releases/tag/16.27.0

Commits

• 285b313 Add font
• 7fbebaf Release 16.27.0
• 182a3c2 Bump version
• See full diff in compare view

Updates typescript-eslint from 8.63.0 to 8.64.0

Release notes

Sourced from typescript-eslint's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 414d9ab chore(release): publish 8.64.0
• See full diff in compare view

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

• Empty fragments are now counted toward the limit (a2f4e7c0).
• The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

• ae1de54 [dist] 8.21.1
• 8e9511b [ci] Trust Coveralls Homebrew tap
• f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
• 8df8265 [ci] Update actions/checkout action to v7
• a2f4e7c [fix] Count empty fragments toward the limit (#2329)
• e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
• 4ea355d [doc] Document 32-bit signed integer coercion for option values
• 2120f4c [example] Remove uuid dependency
• 4c534a6 [security] Add latest vulnerability to SECURITY.md
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
electron	[>= 30.a, < 31]
electron	[>= 38.a, < 39]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions