Bump the npm-minor-patch group with 16 updates by dependabot[bot] · Pull Request #509 · orionrobots/orionrobots.github.io

dependabot · 2026-09-26T19:49:24Z

Bumps the npm-minor-patch group with 16 updates:

Package	From	To
@types/node	`26.6.1`	`26.6.2`
sass	`1.104.1`	`1.105.0`
tsx	`4.23.13`	`4.23.15`
webpack	`5.111.0`	`5.111.1`
webpack-bundle-analyzer	`5.3.3`	`5.4.0`
baseline-browser-mapping	`2.11.24`	`2.11.26`
electron-to-chromium	`1.5.430`	`1.5.439`
is-core-module	`2.16.2`	`2.17.0`
is-installed-globally	`1.0.0`	`1.0.1`
lru-cache	`11.5.2`	`11.5.3`
minimizer-webpack-plugin	`5.10.1`	`5.12.0`
node-releases	`2.0.55`	`2.0.57`
serialize-javascript	`7.1.1`	`7.1.2`
spdx-license-ids	`3.0.23`	`3.0.24`
typed-array-byte-offset	`1.0.4`	`1.0.5`
which-typed-array	`1.1.22`	`1.1.24`

Updates @types/node from 26.6.1 to 26.6.2

Commits

See full diff in compare view

Updates sass from 1.104.1 to 1.105.0

Release notes

Sourced from sass's releases.

Dart Sass 1.105.0

To install Sass 1.105.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

Add a SassModule class and a corresponding Value.assertModule() method.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.105.0

Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

Add a SassModule class and a corresponding Value.assertModule() method.

Commits

4bf2b92 Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#2865)
850d57e [meta.load] Add support for meta.load() and related features (#2861)
6180be0 Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (#2863)
See full diff in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

exclude bare builtins from namespace inheritance (38e1588)

expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)

make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

npm package (@latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

npm package (@latest dist-tag)

Commits

ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view

Updates webpack from 5.111.0 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

Record hoisted, module and block declarations while parsing, not by re-walking. (by @alexander-akait in #22147)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

... (truncated)

Commits

5a10675 chore(release): new release (#22105)
9c448c4 test: consolidate loose harness files under test/harness (#22163)
a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
0835411 test: move suite drivers into test/templates (#22159)
b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
a774f10 test: define the webpack major instead of bundling package.json (#22160)
4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 5.3.3 to 5.4.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.4.0

Minor Changes

Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @ronakmaheshwari in #738)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.4.0

Minor Changes

Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @ronakmaheshwari in #738)

Commits

6d1ae28 chore(release): new release (#739)
7470242 feat: Migrate to Webpack Built-in Infrastructure Logger with Backwards Compat...
See full diff in compare view

Updates baseline-browser-mapping from 2.11.24 to 2.11.26

Commits

c1934c6 Patch to 2.11.26 because browser or feature data changed
4873684 Browser or feature data changed
9030798 Updating static site
a5df351 Updating static site
ecc5b54 Updating static site
719bf7a Patch to 2.11.25 because browser or feature data changed
c4f5b49 Browser or feature data changed
aa194af Updating static site
See full diff in compare view

Updates electron-to-chromium from 1.5.430 to 1.5.439

Commits

640c0a2 1.5.439
fa7286d generate new version
f8032a6 1.5.438
e4e7dfb generate new version
407c443 1.5.437
a7909c0 generate new version
cde2a4b 1.5.436
4837391 generate new version
43ef44e 1.5.435
3e726ba generate new version
Additional commits viewable in compare view

Updates is-core-module from 2.16.2 to 2.17.0

Changelog

Sourced from is-core-module's changelog.

v2.17.0 - 2026-09-16

Commits

[Dev Deps] update auto-changelog f5d1e38

[New] add types 0a4846c

[Dev Deps] update eslint 83aa342

[Dev Deps] update @ljharb/eslint-config, auto-changelog, mock-property, tape a45ee2a

[Deps] update hasown 7f13111

[actions] set least-privilege cache-mode 9b49659

[Dev Deps] add missing object-keys dev dep 1b3212a

[New] add node:ffi 5974139

Commits

9b50b2d v2.17.0
0a4846c [New] add types
1b3212a [Dev Deps] add missing object-keys dev dep
83aa342 [Dev Deps] update eslint
7f13111 [Deps] update hasown
a45ee2a [Dev Deps] update @ljharb/eslint-config, auto-changelog, mock-property,...
5974139 [New] add node:ffi
9b49659 [actions] set least-privilege cache-mode
f5d1e38 [Dev Deps] update auto-changelog
See full diff in compare view

Updates is-installed-globally from 1.0.0 to 1.0.1

Release notes

Sourced from is-installed-globally's releases.

v1.0.1

Fix false negative with NVM after switching Node.js version (#3) e59c311

sindresorhus/is-installed-globally@v1.0.0...v1.0.1

Commits

376b0e2 1.0.1
e59c311 Fix false negative with NVM after switching Node.js version (#3)
864daa0 Meta tweaks
See full diff in compare view

Updates lru-cache from 11.5.2 to 11.5.3

Commits

7e71a1f 11.5.3
98b553f add react-native export condition with no diagnostics_channel
See full diff in compare view

Updates minimizer-webpack-plugin from 5.10.1 to 5.12.0

Changelog

Sourced from minimizer-webpack-plugin's changelog.

5.12.0

Minor Changes

Take a minimizer as a module path or { path, export }, which a worker requires rather than rebuilding it from its source. (by @alexander-akait in #744)

Patch Changes

Minify a style="" body as a rule's contents with every CSS minimizer, rather than dropping or rejecting it. (by @alexander-akait in #748)

Minify assets whose names carry a #fragment, such as [name].js#[contenthash] or an asset module named [hash][ext][query][fragment]. (by @alexander-akait in #747)

5.11.0

Minor Changes

let a minimizer or generator say which processAssets stage it runs in and what name its work goes under in an asset's info, through a getStage and a getAssetFlag on the function — the way it declares everything else — and ship MinimizerPlugin.compress, which takes the algorithm to run and the compressionOptions to run it with, works under compressed rather than minimized or generated, and goes to minify to compress an asset in place or to generate to write the compressed file beside it (by @alexander-akait in #737)

Add threshold, minRatio and relatedName to an asset generator, let deleteOriginalAssets be a function and take the original file alone, take a filename function, read minify: [] as nothing to minify rather than false, and type what minify has long accepted. (by @alexander-akait in #742)

Rename the exported class to MinimizerPlugin and say so in diagnostics. (by @alexander-akait in #739)

Patch Changes

Fix an asset generator corrupting binary, re-emitting unchanged files, and writing a file it errored on. (by @alexander-akait in #740)

cover that a pass at a second stage adds no worker pool to the one before it. (by @alexander-akait in #741)

Commits

See full diff in compare view

Updates node-releases from 2.0.55 to 2.0.57

Commits

d29b26a 2.0.57
8607968 feat: Nightly Sync
8f44709 2.0.56
5cfca96 feat: Nightly Sync
See full diff in compare view

Updates serialize-javascript from 7.1.1 to 7.1.2

Release notes

Sourced from serialize-javascript's releases.

v7.1.2

See: GHSA-gfhx-hw2g-v5hg

Commits

6a73fa1 release: v7.1.2
2bdbaaf Merge commit from fork
See full diff in compare view

Updates spdx-license-ids from 3.0.23 to 3.0.24

Commits

dc0dd99 3.0.24
2ed8fc2 update license list to v3.29.0 (2026-09-16T00:00:00Z)
See full diff in compare view

Updates typed-array-byte-offset from 1.0.4 to 1.0.5

Changelog

Sourced from typed-array-byte-offset's changelog.

v1.0.5 - 2026-09-16

Commits

[types] fix/improve types 3fde7d0

[Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, auto-changelog, evalmd, make-generator-function, npmignore, object-inspect, possible-typed-array-names, tape 5478136

[Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config 30c9fe9

[Dev Deps] update eslint c20a41c

[Deps] update call-bind, for-each, reflect.getprototypeof 8bae89e

[Dev Deps] update eslint cbfa6c1

[actions] set least-privilege cache-mode eb5da03

[Deps] remove unused dep 30f99ec

Commits

8a67220 v1.0.5
c20a41c [Dev Deps] update eslint
3fde7d0 [types] fix/improve types
8bae89e [Deps] update call-bind, for-each, reflect.getprototypeof
30f99ec [Deps] remove unused dep
5478136 [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@ljharb/...
eb5da03 [actions] set least-privilege cache-mode
cbfa6c1 [Dev Deps] update eslint
30c9fe9 [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config
See full diff in compare view

Updates which-typed-array from 1.1.22 to 1.1.24

Changelog

Sourced from which-typed-array's changelog.

v1.1.24 - 2026-09-18

Commits

[types] fix the types for good, hopefully d746946

v1.1.23 - 2026-09-16

Commits

[types] handle a consumer lib that lacks Float16Array 7fd78fb

[Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, auto-changelog, eslint, tape 885ae7d

[readme] remove dead badges 67844dd

Commits

1e359f0 v1.1.24
d746946 [types] fix the types for good, hopefully
810b079 v1.1.23
885ae7d [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `auto-cha...
7fd78fb [types] handle a consumer lib that lacks Float16Array
67844dd [readme] remove dead badges
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 16 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.1` | `26.6.2` | | [sass](https://github.com/sass/dart-sass) | `1.104.1` | `1.105.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [webpack](https://github.com/webpack/webpack) | `5.111.0` | `5.111.1` | | [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.3.3` | `5.4.0` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.24` | `2.11.26` | | [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.430` | `1.5.439` | | [is-core-module](https://github.com/inspect-js/is-core-module) | `2.16.2` | `2.17.0` | | [is-installed-globally](https://github.com/sindresorhus/is-installed-globally) | `1.0.0` | `1.0.1` | | [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.5.2` | `11.5.3` | | [minimizer-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) | `5.10.1` | `5.12.0` | | [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.55` | `2.0.57` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `7.1.1` | `7.1.2` | | [spdx-license-ids](https://github.com/jslicense/spdx-license-ids) | `3.0.23` | `3.0.24` | | [typed-array-byte-offset](https://github.com/inspect-js/typed-array-byte-offset) | `1.0.4` | `1.0.5` | | [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.22` | `1.1.24` | Updates `@types/node` from 26.6.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `sass` from 1.104.1 to 1.105.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.104.1...1.105.0) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `webpack` from 5.111.0 to 5.111.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.0...v5.111.1) Updates `webpack-bundle-analyzer` from 5.3.3 to 5.4.0 - [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases) - [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v5.3.3...v5.4.0) Updates `baseline-browser-mapping` from 2.11.24 to 2.11.26 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.11.24...v2.11.26) Updates `electron-to-chromium` from 1.5.430 to 1.5.439 - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.430...v1.5.439) Updates `is-core-module` from 2.16.2 to 2.17.0 - [Changelog](https://github.com/inspect-js/is-core-module/blob/main/CHANGELOG.md) - [Commits](inspect-js/is-core-module@v2.16.2...v2.17.0) Updates `is-installed-globally` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/sindresorhus/is-installed-globally/releases) - [Commits](sindresorhus/is-installed-globally@v1.0.0...v1.0.1) Updates `lru-cache` from 11.5.2 to 11.5.3 - [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md) - [Commits](isaacs/node-lru-cache@v11.5.2...v11.5.3) Updates `minimizer-webpack-plugin` from 5.10.1 to 5.12.0 - [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases) - [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/minimizer-webpack-plugin/commits) Updates `node-releases` from 2.0.55 to 2.0.57 - [Commits](chicoxyzzy/node-releases@v2.0.55...v2.0.57) Updates `serialize-javascript` from 7.1.1 to 7.1.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v7.1.1...v7.1.2) Updates `spdx-license-ids` from 3.0.23 to 3.0.24 - [Commits](jslicense/spdx-license-ids@v3.0.23...v3.0.24) Updates `typed-array-byte-offset` from 1.0.4 to 1.0.5 - [Changelog](https://github.com/inspect-js/typed-array-byte-offset/blob/main/CHANGELOG.md) - [Commits](inspect-js/typed-array-byte-offset@v1.0.4...v1.0.5) Updates `which-typed-array` from 1.1.22 to 1.1.24 - [Changelog](https://github.com/inspect-js/which-typed-array/blob/main/CHANGELOG.md) - [Commits](inspect-js/which-typed-array@v1.1.22...v1.1.24) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: sass dependency-version: 1.105.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: webpack dependency-version: 5.111.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: webpack-bundle-analyzer dependency-version: 5.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: baseline-browser-mapping dependency-version: 2.11.26 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: electron-to-chromium dependency-version: 1.5.439 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: is-core-module dependency-version: 2.17.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: is-installed-globally dependency-version: 1.0.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: lru-cache dependency-version: 11.5.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: minimizer-webpack-plugin dependency-version: 5.12.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: node-releases dependency-version: 2.0.57 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: serialize-javascript dependency-version: 7.1.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: spdx-license-ids dependency-version: 3.0.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: typed-array-byte-offset dependency-version: 1.0.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: which-typed-array dependency-version: 1.1.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-26T19:50:22Z

🔨 Webpack Bundle Smoke Test


Status	✅ Passed
Build Time	00:06.74
Bundle Size	485.9 KB

Updated: Sat, 26 Sep 2026 19:50:21 GMT

github-actions · 2026-09-26T19:53:20Z

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	7	0	0	0.15s
⚠️ ACTION	zizmor	7	1	0	0.3s
✅ BASH	bash-exec	2	0	0	0.01s
✅ BASH	shellcheck	2	0	0	0.15s
⚠️ BASH	shfmt	2	1	0	0.01s
⚠️ C	cppcheck	8	8	0	0.07s
⚠️ CPP	cppcheck	8	8	0	0.07s
✅ JSON	npm-package-json-lint	yes	no	no	0.58s
✅ JSON	v8r	17	0	0	13.31s
✅ REPOSITORY	betterleaks	yes	no	no	2.07s
✅ REPOSITORY	git_diff	yes	no	no	1.97s
✅ REPOSITORY	grype	yes	no	no	92.85s
✅ REPOSITORY	osv-scanner	yes	no	no	1.57s
✅ REPOSITORY	secretlint	yes	no	no	15.06s
✅ REPOSITORY	syft	yes	no	no	2.32s
✅ REPOSITORY	trivy-sbom	yes	no	no	1.68s
✅ REPOSITORY	trufflehog	yes	no	no	7.36s
✅ TYPESCRIPT	ts-standard	3	0	0	6.84s
✅ XML	xmllint	1	0	0	11.31s
✅ YAML	v8r	15	0	0	14.07s

Detailed Issues

⚠️ C / cppcheck - 8 errors

Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
1/8 files checked 12% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
2/8 files checked 19% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
3/8 files checked 31% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
4/8 files checked 49% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
5/8 files checked 62% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
6/8 files checked 69% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
7/8 files checked 81% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
8/8 files checked 100% done

⚠️ CPP / cppcheck - 8 errors

Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
1/8 files checked 12% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
2/8 files checked 19% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
3/8 files checked 31% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
4/8 files checked 49% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
5/8 files checked 62% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
6/8 files checked 69% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
7/8 files checked 81% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
8/8 files checked 100% done

⚠️ BASH / shfmt - 1 error

diff .github/scripts/validate-local-build.sh.orig .github/scripts/validate-local-build.sh
--- .github/scripts/validate-local-build.sh.orig
+++ .github/scripts/validate-local-build.sh
@@ -30,9 +30,9 @@
 echo ""
 echo "=== Step 1: Checking http_serve is running ==="
 if ! docker ps --format '{{.Names}}' | grep -q "^${HTTP_SERVE_CONTAINER}$"; then
-  echo "ERROR: ${HTTP_SERVE_CONTAINER} is not running."
-  echo "Start it with: docker compose --profile manual up -d http_serve"
-  exit 1
+    echo "ERROR: ${HTTP_SERVE_CONTAINER} is not running."
+    echo "Start it with: docker compose --profile manual up -d http_serve"
+    exit 1
 fi
 
 # ─── Step 2: Quick HTTP smoke check from host ─────────────────────────────────
@@ -39,17 +39,17 @@
 echo ""
 echo "=== Step 2: HTTP smoke checks (host -> port ${HOST_PORT}) ==="
 for path in "/" "/construction_guide.html" "/tags/arduino/"; do
-  status=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${HOST_PORT}${path}")
-  if [[ "$status" == "200" ]]; then
-    echo "  OK  ${path} -> ${status}"
-  else
-    echo "  FAIL ${path} -> ${status}"
-    SMOKE_FAILED=1
-  fi
+    status=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${HOST_PORT}${path}")
+    if [[ "$status" == "200" ]]; then
+        echo "  OK  ${path} -> ${status}"
+    else
+        echo "  FAIL ${path} -> ${status}"
+        SMOKE_FAILED=1
+    fi
 done
 if [[ -n "${SMOKE_FAILED:-}" ]]; then
-  echo "ERROR: Smoke checks failed."
-  exit 1
+    echo "ERROR: Smoke checks failed."
+    exit 1
 fi
 
 # ─── Step 3: Verify AVIF images are generated ────────────────────────────────
@@ -62,8 +62,8 @@
 echo "  Post body WebP: ${webp_count}"
 echo "  Thumbnail AVIF: ${thumb_avif}"
 if [[ "$avif_count" -eq 0 ]]; then
-  echo "ERROR: No AVIF images found in _site/assets/images. Was the build run?"
-  exit 1
+    echo "ERROR: No AVIF images found in _site/assets/images. Was the build run?"
+    exit 1
 fi
 
 # ─── Step 4: BDD tests ─────────────────────────────────────────────────────
@@ -71,14 +71,14 @@
 echo "=== Step 4: BDD tests (via Docker, network: ${DOCKER_NETWORK}) ==="
 
 docker run --rm \
-  --network "${DOCKER_NETWORK}" \
-  -e BASE_URL="${BASE_URL}" \
-  -v "${PROJECT_ROOT}/tests:/app/src/tests" \
-  -v "${PROJECT_ROOT}/package.json:/app/src/package.json" \
-  -v "${PROJECT_ROOT}/package-lock.json:/app/src/package-lock.json" \
-  -v "${PROJECT_ROOT}/cucumber.js:/app/src/cucumber.js" \
-  "${TEST_IMAGE}" \
-  npm run test:bdd
+    --network "${DOCKER_NETWORK}" \
+    -e BASE_URL="${BASE_URL}" \
+    -v "${PROJECT_ROOT}/tests:/app/src/tests" \
+    -v "${PROJECT_ROOT}/package.json:/app/src/package.json" \
+    -v "${PROJECT_ROOT}/package-lock.json:/app/src/package-lock.json" \
+    -v "${PROJECT_ROOT}/cucumber.js:/app/src/cucumber.js" \
+    "${TEST_IMAGE}" \
+    npm run test:bdd
 
 echo ""
 echo "=== Validation complete ==="

⚠️ ACTION / zizmor - 1 error

INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'artipacked' audit failed on file://.github/workflows/on_call_build_site.yaml

Caused by:
    0: error in 'artipacked' audit
    1: couldn't list tags for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

oxsecurity/megalinter/flavors/dotnetweb@v10.1.0 (81 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,C_CPPCHECK,CPP_CPPCHECK,JSON_V8R,JSON_NPM_PACKAGE_JSON_LINT,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

github-actions · 2026-09-26T19:58:58Z

🏗️ Eleventy Site Build Smoke Test


Status	✅ Passed
Build Time	08:54.41
Site Size	341.2 MB
HTML Files	1418

Updated: Sat, 26 Sep 2026 19:58:58 GMT

github-actions · 2026-09-26T20:02:00Z

🐳 Docker Base Image Available

A new base Docker image has been built and pushed for this PR:

Image: ghcr.io/orionrobots/orionrobots-site.base:509

How to use this image:

# Pull the image
docker pull ghcr.io/orionrobots/orionrobots-site.base:509

# Run with the image
docker run -it ghcr.io/orionrobots/orionrobots-site.base:509 bash

For local development:

You can use this image as a base for testing changes without rebuilding dependencies.

This comment is automatically updated when the base image is rebuilt.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 26, 2026

Navigation Menu

Bump the npm-minor-patch group with 16 updates - #509

Bump the npm-minor-patch group with 16 updates#509
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-b881d5e64e

dependabot Bot commented on behalf of github Sep 26, 2026

Uh oh!

github-actions Bot commented Sep 26, 2026

Uh oh!

github-actions Bot commented Sep 26, 2026

Uh oh!

github-actions Bot commented Sep 26, 2026

Uh oh!

github-actions Bot commented Sep 26, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 26, 2026

Dart Sass 1.105.0

Changes

JS API

Dart API

1.105.0

JS API

Dart API

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

v5.111.1

Patch Changes

5.111.1

Patch Changes

v5.4.0

Minor Changes

5.4.0

Minor Changes

v2.17.0 - 2026-09-16

Commits

v1.0.1

5.12.0

Minor Changes

Patch Changes

5.11.0

Minor Changes

Patch Changes

v7.1.2

v1.0.5 - 2026-09-16

Commits

v1.1.24 - 2026-09-18

Commits

v1.1.23 - 2026-09-16

Commits

Uh oh!

github-actions Bot commented Sep 26, 2026

🔨 Webpack Bundle Smoke Test

Uh oh!

github-actions Bot commented Sep 26, 2026

✅⚠️MegaLinter analysis: Success with warnings

Detailed Issues

Notices

Uh oh!

github-actions Bot commented Sep 26, 2026

🏗️ Eleventy Site Build Smoke Test

Uh oh!

github-actions Bot commented Sep 26, 2026

🐳 Docker Base Image Available

How to use this image:

For local development:

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants