chore(deps): bump the minor-and-patch group across 2 directories with 9 updates by dependabot[bot] · Pull Request #271 · tickernelz/opencode-mem

dependabot · 2026-08-24T06:19:38Z

Bumps the minor-and-patch group with 4 updates in the / directory: @opencode-ai/plugin, @opencode-ai/sdk, hono and @types/bun.
Bumps the minor-and-patch group with 5 updates in the /web directory:

Package	From	To
dompurify	`3.4.13`	`3.4.14`
marked	`18.0.9`	`18.0.10`
@vitejs/plugin-react	`6.0.5`	`6.1.0`
lucide-react	`1.31.0`	`1.33.0`
vite	`8.2.1`	`8.2.2`

Updates @opencode-ai/plugin from 1.18.18 to 1.18.19

Updates @opencode-ai/sdk from 1.18.18 to 1.18.19

Commits

See full diff in compare view

Updates hono from 4.13.2 to 4.13.3

Release notes

Sourced from hono's releases.

v4.13.3

What's Changed

fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227

fix(etag): copy pending stream bytes in honojs/hono#5239

fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234

fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235

docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248

fix(trie-router): match suffix wildcard routes in honojs/hono#5236

fix(pattern-router/linear-router): prevent prefix overmatch on wildcard routes in honojs/hono#5252

fix(csrf): exempt OPTIONS request from CSRF validation in honojs/hono#5250

fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expand IPv6 in honojs/hono#5247

feat(pretty-json): support structured JSON content-types (+json) in honojs/hono#5226

Full Changelog: honojs/hono@v4.13.2...v4.13.3

Commits

0293343 4.13.3
5ad469a feat(pretty-json): support structured JSON content-types (+json) (#5226)
c91ec9b fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expandIPv6 ...
eea9735 fix(csrf): exempt OPTIONS request from CSRF validation (#5250)
a194628 fix(pattern-router/linear-router): prevent prefix overmatch on wildcard route...
63bbcf5 fix(trie-router): match suffix wildcard routes (#5236)
ef0739d docs(context): add custom headers append option example to Context JSDoc (#5248)
8bf03c3 fix(cors): append Origin to Vary header on OPTIONS preflight (#5235)
546eca0 fix(etag): avoid skipping headers when filtering 304 response headers (#5234)
7195c24 fix(etag): copy pending stream bytes (#5239)
Additional commits viewable in compare view

Updates @types/bun from 1.3.14 to 1.4.0

Commits

See full diff in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh

Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1

Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade

Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation

Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes

Updated several development dependencies and CI workflow actions

Commits

4e6fe24 release: 3.4.14 (#1587)
See full diff in compare view

Updates marked from 18.0.9 to 18.0.10

Release notes

Sourced from marked's releases.

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

keep the em/strong mask the same length as the source (#4044) (681373c)

parse EOF backtick fences after paragraphs (#4039) (81bd750)

place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

Commits

8698d35 chore(release): 18.0.10 [skip ci]
58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
ca00e95 docs: replace nonexistent test:all script with npm test (#4054)
b8cf7dc fix: place task checkboxes after list loose is finalized (#4046)
9552b6b chore(deps-dev): bump semantic-release from 25.0.8 to 25.0.9 (#4049)
681373c fix: keep the em/strong mask the same length as the source (#4044)
81bd750 fix: parse EOF backtick fences after paragraphs (#4039)
2e21cd3 docs: move theme button to menu (#4043)
Additional commits viewable in compare view

Updates @vitejs/plugin-react from 6.0.5 to 6.1.0

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:
npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:
npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Commits

39b3173 release: plugin-react@6.1.0 (#1428)
f1340b0 feat(react): add native React Compiler support (#1419)
9ab698e fix(deps): update all non-major dependencies (#1375)
See full diff in compare view

Updates lucide-react from 1.31.0 to 1.33.0

Release notes

Sourced from lucide-react's releases.

Version 1.33.0

What's Changed

feat(icons): add list-clock icon by @lazerg in lucide-icons/lucide#4636

feat(icons): add square-dimensions by @samuelalake in lucide-icons/lucide#4547

feat(icons): added usb-c-port icon by @karsa-mistmere in lucide-icons/lucide#4556

docs(site): correct Vanilla icon import casing by @hugosmoreira in lucide-icons/lucide#4597

feat(icons): added audio-lines-off icon by @karsa-mistmere in lucide-icons/lucide#4589

chore(icon-discussions): add icon design template by @jguddas in lucide-icons/lucide#4691

feat(icons): added mop icon by @karsa-mistmere in lucide-icons/lucide#4682

chore(scripts): Potential fix for code scanning alert no. 31: Inefficient regular expression by @ericfennis in lucide-icons/lucide#4723

chore(deps-dev): bump the svelte-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4720

feat(icon-discussions): close discussions with banned phrases by @jguddas in lucide-icons/lucide#4692

feat(icons): added midi-port icon by @simoncoudeville in lucide-icons/lucide#3754

New Contributors

@hugosmoreira made their first contribution in lucide-icons/lucide#4597

@simoncoudeville made their first contribution in lucide-icons/lucide#3754

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

feat(icons): added car-battery icon by @andreynaz4renko in lucide-icons/lucide#4088

fix(categories): fixes emoji.json by @karsa-mistmere in lucide-icons/lucide#4697

chore(deps): bump vue from 3.5.40 to 3.5.41 in the vue-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4695

chore(dev): upgrade ESLint to latest compatible stack (v10) by @ericfennis with @Copilot in lucide-icons/lucide#4378

feat(icons): add square-text by @samuelalake in lucide-icons/lucide#4609

New Contributors

@andreynaz4renko made their first contribution in lucide-icons/lucide#4088

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
See full diff in compare view

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

bundled-dev: handle lazy request error (#23291) (3ba026d)

bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)

config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)

css: don't pass empty targets to lightningcss (#23295) (2804636)

define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)

deps: update all non-major dependencies (#23217) (ba958bd)

deps: update rolldown-related dependencies (#23218) (83ecb2c)

module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)

optimizer: close custom extension analysis bundles (#23207) (8fb7675)

reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)

respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)

ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)

vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)

use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

define: close rolldown bundler after generate (#23231) (b4d66fe)

module-runner: add TLA circular import case (#23299) (4a261f2)

module-runner: simplify server-hmr tests (#23300) (599b44b)

ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

Commits

de1111a release: v8.2.2
cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
2804636 fix(css): don't pass empty targets to lightningcss (#23295)
599b44b test(module-runner): simplify server-hmr tests (#23300)
4a261f2 test(module-runner): add TLA circular import case (#23299)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 9 updates Bumps the minor-and-patch group with 4 updates in the / directory: @opencode-ai/plugin, [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js), [hono](https://github.com/honojs/hono) and [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun). Bumps the minor-and-patch group with 5 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` | | [marked](https://github.com/markedjs/marked) | `18.0.9` | `18.0.10` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.33.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | Updates `@opencode-ai/plugin` from 1.18.18 to 1.18.19 Updates `@opencode-ai/sdk` from 1.18.18 to 1.18.19 - [Release notes](https://github.com/sst/opencode-sdk-js/releases) - [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/sst/opencode-sdk-js/commits) Updates `hono` from 4.13.2 to 4.13.3 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.2...v4.13.3) Updates `@types/bun` from 1.3.14 to 1.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) Updates `dompurify` from 3.4.13 to 3.4.14 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.13...3.4.14) Updates `marked` from 18.0.9 to 18.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.9...v18.0.10) Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react) Updates `lucide-react` from 1.31.0 to 1.33.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@opencode-ai/plugin" dependency-version: 1.18.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@opencode-ai/sdk" dependency-version: 1.18.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: hono dependency-version: 4.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/bun" dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: dompurify dependency-version: 3.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: marked dependency-version: 18.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

tickernelz · 2026-08-25T04:44:10Z

Merged into main as part of the newest-to-oldest integration batch and scheduled for the next release. The combined tree was verified with frozen installs (root + web), typecheck, production build, and the full test suite (444 passed / 0 failed / 1 skipped) across Linux, Windows, macOS Intel and Apple Silicon CI.

tickernelz · 2026-08-25T05:16:32Z

Released in v2.25.0. The combined integration tree was verified with frozen installs (root + web), typecheck, production build, and the full test suite (444 passed / 0 failed / 1 skipped) across Linux, Windows, macOS Intel and Apple Silicon, then published to npm.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026

tickernelz mentioned this pull request Aug 25, 2026

fix: keep @types/bun 1.4.0 compatible and preserve #265 error propagation #272

Merged

tickernelz merged commit 8f272be into main Aug 25, 2026
7 of 14 checks passed

dependabot Bot deleted the dependabot/bun/minor-and-patch-f0ad1952e0 branch August 25, 2026 04:44

This was referenced Aug 25, 2026

chore: release v2.25.0 #273

Closed

chore: release v2.25.0 #275

Merged

Navigation Menu

chore(deps): bump the minor-and-patch group across 2 directories with 9 updates - #271

chore(deps): bump the minor-and-patch group across 2 directories with 9 updates#271
tickernelz merged 1 commit into
mainfrom
dependabot/bun/minor-and-patch-f0ad1952e0

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Uh oh!

tickernelz commented Aug 25, 2026

Uh oh!

tickernelz commented Aug 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

v4.13.3

What's Changed

DOMPurify 3.4.14

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Version 1.33.0

What's Changed

New Contributors

Version 1.32.0

What's Changed

New Contributors

plugin-legacy@8.2.2

v8.2.2

8.2.2 (2026-08-20)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

Uh oh!

Uh oh!

tickernelz commented Aug 25, 2026

Uh oh!

tickernelz commented Aug 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant