Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the non-security group in /cirq-web/cirq_web with 7 updates:

Package From To
@types/node 24.3.0 24.6.1
mocha 11.7.2 11.7.3
npm 11.5.2 11.6.1
puppeteer 24.18.0 24.22.3
three 0.179.1 0.180.0
@types/three 0.179.0 0.180.0
webpack 5.101.3 5.102.0

Updates @types/node from 24.3.0 to 24.6.1

Commits

Updates mocha from 11.7.2 to 11.7.3

Release notes

Sourced from mocha's releases.

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)
Changelog

Sourced from mocha's changelog.

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)
Commits
  • c805327 chore(main): release 11.7.3 (#5455)
  • ebdbc48 fix: use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION ...
  • 4122c7d docs: add security escalation policy (#5466)
  • 1164b9d docs: fix duplicate global leak documentation (#5461)
  • 48c6f40 build(deps): bump actions/setup-node in the github-actions group (#5459)
  • 6654704 docs: migrate third party UIs wiki page to docs (#5434)
  • 55fd22a Cleanup "related tools" pages (#5457)
  • 56486b1 Update authors, make release-please do the same (#5456)
  • 185ae1e docs: update maintainer release notes for release-please (#5453)
  • See full diff in compare view

Updates npm from 11.5.2 to 11.6.1

Release notes

Sourced from npm's releases.

v11.6.1

11.6.1 (2025-09-23)

Bug Fixes

Documentation

Dependencies

... (truncated)

Changelog

Sourced from npm's changelog.

11.6.1 (2025-09-23)

Bug Fixes

Documentation

Dependencies

... (truncated)

Commits

Updates puppeteer from 24.18.0 to 24.22.3

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.22.3

24.22.3 (2025-09-24)

Bug Fixes

puppeteer: v24.22.3

24.22.3 (2025-09-24)

Miscellaneous Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.22.2 to 24.22.3

puppeteer-core: v24.22.2

24.22.2 (2025-09-23)

Bug Fixes

  • pipes: concat buffers instead of string concatenation (#14236) (21e54b6)

puppeteer: v24.22.2

24.22.2 (2025-09-23)

Miscellaneous Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.22.1 to 24.22.2

puppeteer-core: v24.22.1

24.22.1 (2025-09-23)

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.22.3 (2025-09-24)

Miscellaneous Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.22.2 to 24.22.3

Bug Fixes

24.22.2 (2025-09-23)

Miscellaneous Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.22.1 to 24.22.2

Bug Fixes

  • pipes: concat buffers instead of string concatenation (#14236) (21e54b6)

24.22.1 (2025-09-23)

Miscellaneous Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

... (truncated)

Commits

Updates three from 0.179.1 to 0.180.0

Commits

Updates @types/three from 0.179.0 to 0.180.0

Commits

Updates webpack from 5.101.3 to 5.102.0

Release notes

Sourced from webpack's releases.

v5.102.0

Features

  • Added static analyze for dynamic imports
  • Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
  • Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
  • Added the snapshot.contextModule to configure snapshots options for context modules
  • Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
  • The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
  • The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
  • Added function matcher support in rule options

Fixes

  • Fixed conflicts caused by multiple concatenate modules
  • Ignore import failure during HMR update with ES modules output
  • Keep render module order consistent
  • Prevent inlining modules that have this exports
  • Removed unused timeout attribute of script tag
  • Supported UMD chunk format to work in web workers
  • Improved CommonJs bundle to ES module library
  • Use es-lexer for mjs files for build dependencies
  • Fixed support __non_webpack_require__ for ES modules
  • Properly handle external modules for CSS
  • AssetsByChunkName included assets from chunk.auxiliaryFiles
  • Use createRequire only when output is ES module and target is node
  • Typescript types

Performance Improvements

  • Avoid extra calls for snapshot
  • A avoid extra jobs for build dependencies
  • Move import attributes to own dependencies
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@types/node [< 24.1, > 24.0.8]
@types/three [>= 0.178.a, < 0.179]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-security group in /cirq-web/cirq_web with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.3.0` | `24.6.1` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.2` | `11.7.3` |
| [npm](https://github.com/npm/cli) | `11.5.2` | `11.6.1` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.18.0` | `24.22.3` |
| [three](https://github.com/mrdoob/three.js) | `0.179.1` | `0.180.0` |
| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.179.0` | `0.180.0` |
| [webpack](https://github.com/webpack/webpack) | `5.101.3` | `5.102.0` |


Updates `@types/node` from 24.3.0 to 24.6.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `mocha` from 11.7.2 to 11.7.3
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.2...v11.7.3)

Updates `npm` from 11.5.2 to 11.6.1
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v11.5.2...v11.6.1)

Updates `puppeteer` from 24.18.0 to 24.22.3
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.18.0...puppeteer-v24.22.3)

Updates `three` from 0.179.1 to 0.180.0
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `@types/three` from 0.179.0 to 0.180.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three)

Updates `webpack` from 5.101.3 to 5.102.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.101.3...v5.102.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
- dependency-name: mocha
  dependency-version: 11.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-security
- dependency-name: npm
  dependency-version: 11.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
- dependency-name: puppeteer
  dependency-version: 24.22.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
- dependency-name: three
  dependency-version: 0.180.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
- dependency-name: "@types/three"
  dependency-version: 0.180.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
- dependency-name: webpack
  dependency-version: 5.102.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added area/dependencies area/javascript Pull requests that update Javascript code kind/health For CI/testing/release process/refactoring/technical debt items labels Oct 1, 2025
@dependabot dependabot bot requested review from vtomole and a team as code owners October 1, 2025 15:36
@dependabot dependabot bot added the kind/health For CI/testing/release process/refactoring/technical debt items label Oct 1, 2025
@dependabot dependabot bot requested a review from MichaelBroughton October 1, 2025 15:36
@dependabot dependabot bot added area/dependencies area/javascript Pull requests that update Javascript code labels Oct 1, 2025
@github-actions github-actions bot added the Size: XS <10 lines changed label Oct 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/dependencies area/javascript Pull requests that update Javascript code kind/health For CI/testing/release process/refactoring/technical debt items Size: XS <10 lines changed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants