Skip to content

Comments

chore(deps): bump the npm-dependencies group with 9 updates#290

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-e8ac2f0bb1
Open

chore(deps): bump the npm-dependencies group with 9 updates#290
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-e8ac2f0bb1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 17, 2026

Bumps the npm-dependencies group with 9 updates:

Package From To
@filoz/synapse-sdk 0.36.1 0.37.0
filecoin-pin 0.15.1 0.16.0
pg-boss 12.11.1 12.11.2
undici 7.21.0 7.22.0
viem 2.45.2 2.46.0
lucide-react 0.563.0 0.564.0
tailwind-merge 3.4.0 3.4.1
jsdom 28.0.0 28.1.0
@biomejs/biome 2.3.14 2.4.0

Updates @filoz/synapse-sdk from 0.36.1 to 0.37.0

Release notes

Sourced from @​filoz/synapse-sdk's releases.

synapse-sdk: v0.37.0

0.37.0 (2026-02-11)

⚠ BREAKING CHANGES

  • change params to options object and remove withIpni (#601)
  • remove pdp classes and change upload input to File
  • transition from ethers to viem (#555)
  • replace getMaxProvingPeriod() and getChallengeWindow() with getPDPConfig() (#526)
  • use activePieceCount for accurate piece tracking (#517)
  • change to only export Synapse from the main entrypoint

refactor

  • replace getMaxProvingPeriod() and getChallengeWindow() with getPDPConfig() (#526) (a4956c7)

Features

  • Add API for querying remaining egress (#430) (c40d6b8)
  • add devnet support (#527) (773551b)
  • change params to options object and remove withIpni (#601) (0d529e2)
  • change to only export Synapse from the main entrypoint (4c0cc47), closes #232
  • Endorsements Service (#553) (fba3280)
  • examples/cli: add get-sp-peer-ids command (#546) (8aafdf1)
  • move ethers to peer dependencies (242a2c1)
  • remove pdp classes and change upload input to File (32700c2)
  • storage: rename "pieces" callbacks, add piece info & dataSetId (#439) (f1bd585)
  • transition from ethers to viem (#555) (3741241)
  • use activePieceCount for accurate piece tracking (#517) (59fd863)

Bug Fixes

  • cache clientDataSetId in StorageContext (#489) (ec1345a)
  • change FilBeam URL to stats.filbeam.com (#539) (87ac7a8)
  • createStorageContext without getClientDataSetsWithDetails (#438) (76e2439)
  • expose getScheduledRemovals on storageContext (#490) (6a3b5cc)
  • remove settlement fee (#502) (8c7537e), closes #243
  • remove telemetry (#562) (128037e)
  • resolveByProviderId doesnt use getClientDataSetsWithDetails (1049c05)
  • revert back uploads to uint8array and stream (67a17ee)
  • simplify upload input to Blob (908c042)
  • treat status code 202 for findPiece as a retry (6b9e03f)
  • warm-storage: check metadata withCDN key in addition to cdnRailId for CDN status (#505) (db234e5)

Chores

... (truncated)

Commits
  • 2524aeb chore(master): release synapse-sdk 0.37.0 (#481)
  • 0902a01 chore(master): release synapse-core 0.2.0 (#482)
  • 0d529e2 feat!: change params to options object and remove withIpni (#601)
  • 67a17ee fix: revert back uploads to uint8array and stream
  • d7b9661 fix: namespace upload types
  • 9b3f73f fix: move default nonces to the sign functions
  • 908c042 fix: simplify upload input to Blob
  • 78cfd25 chore: skip size limit test in StorageService due to browser limitations
  • ac0e76e chore: linter
  • 8061afb chore: update docs and export missing types
  • Additional commits viewable in compare view

Updates filecoin-pin from 0.15.1 to 0.16.0

Release notes

Sourced from filecoin-pin's releases.

v0.16.0

0.16.0 (2026-02-07)

Features

  • add --data-set and --new-data-set flags to add command (#296) (e03719b)
  • add provider command with info and ping subcommands (#295) (c52ebbf)

Bug Fixes

  • use namespace import for Sentry SDK v8+ ESM compatibility (#319) (320a461)

Chores

  • deps-dev: bump @​biomejs/biome from 2.3.13 to 2.3.14 (#318) (97f6f1b)
  • deps: bump @​clack/prompts from 0.11.0 to 1.0.0 (#315) (63b34e0)
Changelog

Sourced from filecoin-pin's changelog.

0.16.0 (2026-02-07)

Features

  • add --data-set and --new-data-set flags to add command (#296) (e03719b)
  • add provider command with info and ping subcommands (#295) (c52ebbf)

Bug Fixes

  • use namespace import for Sentry SDK v8+ ESM compatibility (#319) (320a461)

Chores

  • deps-dev: bump @​biomejs/biome from 2.3.13 to 2.3.14 (#318) (97f6f1b)
  • deps: bump @​clack/prompts from 0.11.0 to 1.0.0 (#315) (63b34e0)
Commits
  • 778928e chore(master): release 0.16.0 (#317)
  • f15bba4 ci: Update auto-label workflow to use pull_request_target (#323)
  • 97f6f1b chore(deps-dev): bump @​biomejs/biome from 2.3.13 to 2.3.14 (#318)
  • 63b34e0 chore(deps): bump @​clack/prompts from 0.11.0 to 1.0.0 (#315)
  • 320a461 fix: use namespace import for Sentry SDK v8+ ESM compatibility (#319)
  • e03719b feat: add --data-set and --new-data-set flags to add command (#296)
  • c52ebbf feat: add provider command with info and ping subcommands (#295)
  • See full diff in compare view

Updates pg-boss from 12.11.1 to 12.11.2

Release notes

Sourced from pg-boss's releases.

12.11.2

What's Changed

New Contributors

Full Changelog: timgit/pg-boss@12.11.1...12.11.2

Commits

Updates undici from 7.21.0 to 7.22.0

Release notes

Sourced from undici's releases.

v7.22.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.21.0...v7.22.0

Commits
  • 0a23610 Bumped v7.22.0 (#4829)
  • f3c5c61 feat: Support async cache stores in revalidation (#4826)
  • 9b78a44 fix(deduplicate): avoid deduping methods not in methods option (#4818)
  • 0ce57ba build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 (#4821)
  • 2453caf fix: route websocket upgrades through new handler API (#4787)
  • 4658cdf feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk (#4676)
  • a821c56 fix: use OR operator in includesCredentials per WHATWG URL Standard (#4816)
  • b3326b5 docs: fix syntax highlighting in WebSocket.md (#4814)
  • See full diff in compare view

Updates viem from 2.45.2 to 2.46.0

Release notes

Sourced from viem's releases.

viem@2.46.0

Minor Changes

  • #4304 b6b50d40fb6bbadc851377b74b2dd4da584958b0 Thanks @​jxom! - Breaking (viem/tempo): Renamed nonceKey: 'random' to nonceKey: 'expiring' to align with TIP-1009 terminology.

    TIP-1009 defines "expiring nonces" as time-based replay protection using validBefore timestamps. The name 'expiring' better describes the mechanism than 'random'.

    await sendTransaction(client, {
      account,
    - nonceKey: 'random',
    + nonceKey: 'expiring',
      to: '0x...',
    })

viem@2.45.3

Patch Changes

Commits

Updates lucide-react from 0.563.0 to 0.564.0

Release notes

Sourced from lucide-react's releases.

Version 0.564.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.563.1...0.564.0

Hotfix @lucide/svelte hasA11yProp.js import

What's Changed

Full Changelog: lucide-icons/lucide@0.563.0...0.563.1

Commits

Updates tailwind-merge from 3.4.0 to 3.4.1

Release notes

Sourced from tailwind-merge's releases.

v3.4.1

Bug Fixes

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 02b6eb6 v3.4.1
  • 6b845eb add agent info for release workflow
  • 655f2f1 add changelog for v3.4.1
  • e44e5eb add agent docs
  • 4a38681 Merge pull request #644 from dcastil/renovate/major-vitest-monorepo
  • 23ac259 migrate to vitest v4
  • 927f617 chore(deps): update vitest monorepo to v4
  • aea4869 Merge pull request #648 from dcastil/renovate/major-octokit-monorepo
  • 78365f2 Merge pull request #646 from dcastil/renovate/actions-exec-3.x
  • b08384d fix(deps): update dependency @​octokit/types to v16
  • Additional commits viewable in compare view

Updates jsdom from 28.0.0 to 28.1.0

Release notes

Sourced from jsdom's releases.

Version 28.1.0

  • Added blob.text(), blob.arrayBuffer(), and blob.bytes() methods.
  • Improved getComputedStyle() to account for CSS specificity when multiple rules apply. (asamuzaK)
  • Improved synchronous XMLHttpRequest performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.
  • Improved performance of node.getRootNode(), node.isConnected, and event.dispatchEvent() by caching the root node of document-connected trees.
  • Fixed getComputedStyle() to correctly handle !important priority. (asamuzaK)
  • Fixed document.getElementById() to return the first element in tree order when multiple elements share the same ID.
  • Fixed <svg> elements to no longer incorrectly proxy event handlers to the Window.
  • Fixed FileReader event timing and fileReader.result state to more closely follow the spec.
  • Fixed a potential hang when synchronous XMLHttpRequest encountered dispatch errors.
  • Fixed compatibility with environments where Node.js's built-in fetch() has been used before importing jsdom, by working around undici v6/v7 incompatibilities.
Changelog

Sourced from jsdom's changelog.

28.1.0

  • Added blob.text(), blob.arrayBuffer(), and blob.bytes() methods.
  • Improved getComputedStyle() to account for CSS specificity when multiple rules apply. (asamuzaK)
  • Improved synchronous XMLHttpRequest performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.
  • Improved performance of node.getRootNode(), node.isConnected, and event.dispatchEvent() by caching the root node of document-connected trees.
  • Fixed getComputedStyle() to correctly handle !important priority. (asamuzaK)
  • Fixed document.getElementById() to return the first element in tree order when multiple elements share the same ID.
  • Fixed <svg> elements to no longer incorrectly proxy event handlers to the Window.
  • Fixed FileReader event timing and fileReader.result state to more closely follow the spec.
  • Fixed a potential hang when synchronous XMLHttpRequest encountered dispatch errors.
  • Fixed compatibility with environments where Node.js's built-in fetch() has been used before importing jsdom, by working around undici v6/v7 incompatibilities.
Commits
  • 12949b5 Version 28.1.0
  • ce4c58f Apply CSS specificity when computing styles
  • 7ed55a0 Skip single-byte-decoder encoding tests on Node 20
  • f3b1973 Generalize node version conditions in test expectations
  • 853c596 Rewrite getElementById ID caching for tree-order correctness
  • 5fbfde6 Fix potential sync XHR worker hang from unhandled dispatch errors
  • 82df38f Cache the root node for document-connected trees
  • ed7c5c0 Add documentation comment to create-event-accessor.js
  • b4562e9 Simplify Window.js installEventHandlers
  • 7da340f Centralize "determine the target of an event handler"
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.3.14 to 2.4.0

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.0

2.4.0

Minor Changes

  • #8964 0353fa0 Thanks @​dyc3! - Added ignore option to the useHookAtTopLevel rule.

    You can now specify function names that should not be treated as hooks, even if they follow the use* naming convention.

    Example configuration:

    {
      "linter": {
        "rules": {
          "correctness": {
            "useHookAtTopLevel": {
              "options": {
                "ignore": ["useDebounce", "useCustomUtility"]
              }
            }
          }
        }
      }
    }
  • #8769 d0358b0 Thanks @​rahuld109! - Added the rule useAnchorContent for HTML to enforce that anchor elements have accessible content for screen readers. The rule flags empty anchors, anchors with only whitespace, and anchors where all content is hidden with aria-hidden. Anchors with aria-label or title attributes providing a non-empty accessible name are considered valid.

  • #8742 6340ce6 Thanks @​rahuld109! - Added the rule useMediaCaption to the HTML language. Enforces that audio and video elements have a track element with kind="captions" for accessibility. Muted videos are allowed without captions.

  • #8621 d11130b Thanks @​Netail! - Added support for multiple reporters, and the ability to save reporters on arbitrary files.

    Combine two reporters in CI

    If you run Biome on GitHub, take advantage of the reporter and still see the errors in console, you can now use both reporters:

    biome ci --reporter=default --reporter=github

    Save reporter output to a file

    With the new --reporter-file CLI option, it's now possible to save the output of all reporters to a file. The file is a path, so you can pass a relative or an absolute path:

    biome ci --reporter=rdjson --reporter-file=/etc/tmp/report.json
    biome ci --reporter=summary --reporter-file=./reports/file.txt

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.0

Minor Changes

  • #8964 0353fa0 Thanks @​dyc3! - Added ignore option to the useHookAtTopLevel rule.

    You can now specify function names that should not be treated as hooks, even if they follow the use* naming convention.

    Example configuration:

    {
      "linter": {
        "rules": {
          "correctness": {
            "useHookAtTopLevel": {
              "options": {
                "ignore": ["useDebounce", "useCustomUtility"]
              }
            }
          }
        }
      }
    }
  • #8769 d0358b0 Thanks @​rahuld109! - Added the rule useAnchorContent for HTML to enforce that anchor elements have accessible content for screen readers. The rule flags empty anchors, anchors with only whitespace, and anchors where all content is hidden with aria-hidden. Anchors with aria-label or title attributes providing a non-empty accessible name are considered valid.

  • #8742 6340ce6 Thanks @​rahuld109! - Added the rule useMediaCaption to the HTML language. Enforces that audio and video elements have a track element with kind="captions" for accessibility. Muted videos are allowed without captions.

  • #8621 d11130b Thanks @​Netail! - Added support for multiple reporters, and the ability to save reporters on arbitrary files.

    Combine two reporters in CI

    If you run Biome on GitHub, take advantage of the reporter and still see the errors in console, you can now use both reporters:

    biome ci --reporter=default --reporter=github

    Save reporter output to a file

    With the new --reporter-file CLI option, it's now possible to save the output of all reporters to a file. The file is a path, so you can pass a relative or an absolute path:

    biome ci --reporter=rdjson --reporter-file=/etc/tmp/report.json
    biome ci --reporter=summary --reporter-file=./reports/file.txt

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 17, 2026
@FilOzzy FilOzzy added this to FOC Feb 17, 2026
@github-project-automation github-project-automation bot moved this to 📌 Triage in FOC Feb 17, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-e8ac2f0bb1 branch from c00ed39 to 63f5127 Compare February 18, 2026 07:39
Bumps the npm-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@filoz/synapse-sdk](https://github.com/FilOzone/synapse-sdk) | `0.36.1` | `0.37.0` |
| [filecoin-pin](https://github.com/filecoin-project/filecoin-pin) | `0.15.1` | `0.16.0` |
| [pg-boss](https://github.com/timgit/pg-boss) | `12.11.1` | `12.11.2` |
| [undici](https://github.com/nodejs/undici) | `7.21.0` | `7.22.0` |
| [viem](https://github.com/wevm/viem) | `2.45.2` | `2.46.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.563.0` | `0.564.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.0` | `3.4.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `28.0.0` | `28.1.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.14` | `2.4.0` |


Updates `@filoz/synapse-sdk` from 0.36.1 to 0.37.0
- [Release notes](https://github.com/FilOzone/synapse-sdk/releases)
- [Commits](FilOzone/synapse-sdk@synapse-sdk-v0.36.1...synapse-sdk-v0.37.0)

Updates `filecoin-pin` from 0.15.1 to 0.16.0
- [Release notes](https://github.com/filecoin-project/filecoin-pin/releases)
- [Changelog](https://github.com/filecoin-project/filecoin-pin/blob/master/CHANGELOG.md)
- [Commits](filecoin-project/filecoin-pin@v0.15.1...v0.16.0)

Updates `pg-boss` from 12.11.1 to 12.11.2
- [Release notes](https://github.com/timgit/pg-boss/releases)
- [Commits](timgit/pg-boss@12.11.1...12.11.2)

Updates `undici` from 7.21.0 to 7.22.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.21.0...v7.22.0)

Updates `viem` from 2.45.2 to 2.46.0
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.45.2...viem@2.46.0)

Updates `lucide-react` from 0.563.0 to 0.564.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.564.0/packages/lucide-react)

Updates `tailwind-merge` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.4.0...v3.4.1)

Updates `jsdom` from 28.0.0 to 28.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@28.0.0...28.1.0)

Updates `@biomejs/biome` from 2.3.14 to 2.4.0
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.0/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@filoz/synapse-sdk"
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: filecoin-pin
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: pg-boss
  dependency-version: 12.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: undici
  dependency-version: 7.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 0.564.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: jsdom
  dependency-version: 28.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-e8ac2f0bb1 branch from 63f5127 to d35fc4e Compare February 18, 2026 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: 📌 Triage

Development

Successfully merging this pull request may close these issues.

0 participants