chore(deps): bump the dependencies group across 1 directory with 6 updates #524

dependabot · 2025-12-10T05:05:00Z

Bumps the dependencies group with 6 updates in the / directory:

Package	From	To
react	`19.2.0`	`19.2.1`
react-dom	`19.2.0`	`19.2.1`
react-router-dom	`6.30.0`	`6.30.2`
react-syntax-highlighter	`15.6.1`	`15.6.6`
scheduler	`0.26.0`	`0.27.0`
cmd-ts	`0.13.0`	`0.14.3`

Updates react from 19.2.0 to 19.2.1

Release notes

Sourced from react's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

053df4e Version 19.2.1
See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.1

Release notes

Sourced from react-dom's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

053df4e Version 19.2.1
See full diff in compare view

Updates react-router-dom from 6.30.0 to 6.30.2

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

Updated dependencies

react-router@6.4.0-pre.15

react-router-dom@6.4.0-pre.15

Changelog

Sourced from react-router-dom's changelog.

v6.30.2

Date: 2025-11-13

Patch Changes

Normalize double-slashes in resolvePath (#14537)

Full Changelog: v6.30.1...v6.30.2

v6.30.1

Date: 2025-05-20

Patch Changes

Partially revert optimization added in 6.29.0 to reduce calls to matchRoutes because it surfaced other issues (#13623)

Stop logging invalid warning when v7_relativeSplatPath is set to false (#13502)

Full Changelog: v6.30.0...v6.30.1

Commits

26b5d45 chore: Update version for release (#14541)
919f8a8 chore: Update version for release (pre-v6) (#14540)
3f2400e chore: Update version for release (#13647)
25a264d chore: Update version for release (pre-v6) (#13638)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-router-dom since your current version.

Updates react-syntax-highlighter from 15.6.1 to 15.6.6

Release notes

Sourced from react-syntax-highlighter's releases.

v15.6.6

Updated overrides block attempting to solve transitive prismjs dependency issue:
"overrides": {
    "prismjs": "^1.30.0",
    "refractor": {
      "prismjs": "^1.30.0"
    }
  }
Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.5...v15.6.6

v15.6.5

What's Changed

Bump elliptic from 6.5.5 to 6.6.0 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#576

Bump ws from 6.2.2 to 6.2.3 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#574

Bump express from 4.19.2 to 4.21.1 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#572

Bump send and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#571

Bump cookie and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#570

Bump serve-static and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#569

Bump body-parser and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#568

Add Boemly to the built with section of the readme by @lukasbals in react-syntax-highlighter/react-syntax-highlighter#467

New Contributors

@lukasbals made their first contribution in react-syntax-highlighter/react-syntax-highlighter#467

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.4...v15.6.5

v15.6.4

What's Changed

Override refractor 3.6.0's prismjs dependency by @simmerer in react-syntax-highlighter/react-syntax-highlighter#605

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.3...v15.6.4

v15.6.3

What's Changed

fix line count error by @bbbert in react-syntax-highlighter/react-syntax-highlighter#583

fix spelling error by @BrianHung in react-syntax-highlighter/react-syntax-highlighter#579

New Contributors

@bbbert made their first contribution in react-syntax-highlighter/react-syntax-highlighter#583

@BrianHung made their first contribution in react-syntax-highlighter/react-syntax-highlighter#579

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.2...v15.6.3

v15.6.2

What's Changed

... (truncated)

Changelog

Sourced from react-syntax-highlighter's changelog.

Changelog

Commits

56a1b0f add top-level override for prismjs, bump to 15.6.6
a169285 bump to 15.6.5
5d507f0 Add Boemly to the built with section of the readme (#467)
0bda769 Bump body-parser and express (#568)
9fb3f73 Bump serve-static and express (#569)
5f0dbfc Bump cookie and express (#570)
53e6607 Bump send and express (#571)
130c9c3 Bump express from 4.19.2 to 4.21.1 (#572)
9382590 Bump ws from 6.2.2 to 6.2.3 (#574)
7ecf606 Bump elliptic from 6.5.5 to 6.6.0 (#576)
Additional commits viewable in compare view

Updates scheduler from 0.26.0 to 0.27.0

Commits

See full diff in compare view

Updates cmd-ts from 0.13.0 to 0.14.3

Release notes

Sourced from cmd-ts's releases.

v0.14.3

Patch Changes

e0afa2f: handle circuit breaker (--help and --version) before parsing arguments

v0.14.2

Patch Changes

87565b2: Added onMissing callback support to flags, options, and custom types

That allows providing dynamic fallback values when command-line arguments are not provided, This enables:

Hiding default values from help output

Interactive prompts: Ask users for input when flags/options are missing

Environment-based defaults: Check environment variables or config files dynamically

Auto-discovery: Automatically find files or resources when not specified

Async support: Handle both synchronous and asynchronous fallback logic

The onMissing callback is used as a fallback when defaultValue is not provided, following the precedence order: environment variables → defaultValue → onMissing → type defaults.

New APIs:

flag({ onMissing: () => boolean | Promise })

option({ onMissing: () => T | Promise })

multioption({ onMissing: () => T[] | Promise<T[]> })

Custom Type interface now supports onMissing property

v0.14.1

Patch Changes

46bf4a7: fix: properly reconstruct original argument strings in rest combinator

Changelog

Sourced from cmd-ts's changelog.

0.14.3

Patch Changes

e0afa2f: handle circuit breaker (--help and --version) before parsing arguments

0.14.2

Patch Changes

87565b2: Added onMissing callback support to flags, options, and custom types

That allows providing dynamic fallback values when command-line arguments are not provided, This enables:

Hiding default values from help output

Interactive prompts: Ask users for input when flags/options are missing

Environment-based defaults: Check environment variables or config files dynamically

Auto-discovery: Automatically find files or resources when not specified

Async support: Handle both synchronous and asynchronous fallback logic

The onMissing callback is used as a fallback when defaultValue is not provided, following the precedence order: environment variables → defaultValue → onMissing → type defaults.

New APIs:

flag({ onMissing: () => boolean | Promise })

option({ onMissing: () => T | Promise })

multioption({ onMissing: () => T[] | Promise<T[]> })

Custom Type interface now supports onMissing property

0.14.1

Patch Changes

46bf4a7: fix: properly reconstruct original argument strings in rest combinator

0.14.0

Minor Changes

a1afb05: --help exits with statuscode 0

Commits

72e1111 Version Packages (#249)
e0afa2f handle circuitbreaker before parsing arguments (#248)
0e63c80 Version Packages (#246)
87565b2 add onMissing config option for interactive/async default values (#245)
77aa47d try to fix releases or something
50fd6db Version Packages (#240)
46bf4a7 fix: properly reconstruct original argument strings in rest combinator (#239)
7ccafe4 Version Packages (#229)
e67011f chore(deps): update dependency vitest to v3.2.4 (#230)
84e4a30 chore(deps): update actions/cache action to v4 (#227)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.1` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.1` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.30.0` | `6.30.2` | | [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.1` | `15.6.6` | | [scheduler](https://github.com/facebook/react/tree/HEAD/packages/scheduler) | `0.26.0` | `0.27.0` | | [cmd-ts](https://github.com/Schniz/cmd-ts) | `0.13.0` | `0.14.3` | Updates `react` from 19.2.0 to 19.2.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react) Updates `react-dom` from 19.2.0 to 19.2.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react-dom) Updates `react-router-dom` from 6.30.0 to 6.30.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.2/packages/react-router-dom) Updates `react-syntax-highlighter` from 15.6.1 to 15.6.6 - [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases) - [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD) - [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.1...v15.6.6) Updates `scheduler` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/scheduler) Updates `cmd-ts` from 0.13.0 to 0.14.3 - [Release notes](https://github.com/Schniz/cmd-ts/releases) - [Changelog](https://github.com/Schniz/cmd-ts/blob/main/CHANGELOG.md) - [Commits](Schniz/cmd-ts@v0.13.0...v0.14.3) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-dom dependency-version: 19.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-router-dom dependency-version: 6.30.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-syntax-highlighter dependency-version: 15.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: scheduler dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cmd-ts dependency-version: 0.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2025-12-19T11:10:01Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
react-router-dom@6.30.0 ⏵ 6.30.2
@types/react@19.2.6 ⏵ 19.2.7		⁺¹	^-2
react@19.2.0 ⏵ 19.2.3
cmd-ts@0.13.0 ⏵ 0.14.3	⁺¹	⁺¹	⁺⁴
react-syntax-highlighter@15.6.1 ⏵ 15.6.6	⁺¹	⁺¹
react-dom@19.2.0 ⏵ 19.2.3

View full report

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 10, 2025

dependabot bot requested a review from a team as a code owner December 10, 2025 05:05

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 10, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-277105b42b branch from 80c17b3 to 21e5c48 Compare December 19, 2025 11:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 6 updates #524

chore(deps): bump the dependencies group across 1 directory with 6 updates #524

Uh oh!

dependabot bot commented on behalf of github Dec 10, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the dependencies group across 1 directory with 6 updates #524

Are you sure you want to change the base?

chore(deps): bump the dependencies group across 1 directory with 6 updates #524

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

v6.30.2

Patch Changes

v6.30.1

Patch Changes

v15.6.6

v15.6.5

What's Changed

New Contributors

v15.6.4

What's Changed

v15.6.3

What's Changed

New Contributors

v15.6.2

What's Changed

Changelog

v0.14.3

Patch Changes

v0.14.2

Patch Changes

v0.14.1

Patch Changes

0.14.3

Patch Changes

0.14.2

Patch Changes

0.14.1

Patch Changes

0.14.0

Minor Changes

Uh oh!

socket-security bot commented Dec 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 10, 2025 •

edited

Loading