Skip to content

deps(deps): bump the minor-and-patch group across 1 directory with 15 updates - #92

Merged
cjlapao merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-aea6ac13e1
Sep 29, 2026
Merged

deps(deps): bump the minor-and-patch group across 1 directory with 15 updates#92
cjlapao merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-aea6ac13e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 15 updates in the / directory:

Package From To
@amplitude/analytics-browser 2.45.8 2.47.0
agentic-flow 2.1.2 2.1.3
react-router-dom 7.18.3 7.18.4
tailwind-merge 3.6.0 3.7.0
@testing-library/dom 10.4.1 10.4.2
@types/node 26.5.1 26.6.2
@vitest/coverage-v8 5.0.0 5.0.1
autoprefixer 10.5.6 10.6.1
jsdom 30.0.1 30.1.1
ruflo 3.41.2 3.45.0
sass-embedded 1.104.0 1.105.0
vite 8.3.0 8.3.1
vitest 5.0.0 5.0.1
@rollup/rollup-linux-x64-gnu 4.63.1 4.63.5
tsx 4.22.1 4.23.15

Updates @amplitude/analytics-browser from 2.45.8 to 2.47.0

Release notes

Sourced from @​amplitude/analytics-browser's releases.

@​amplitude/analytics-browser@​2.47.0

2.47.0 (2026-09-23)

Features

@​amplitude/analytics-browser@​2.47.0-video-analytics-5.0

2.47.0-video-analytics-5.0 (2026-09-22)

Bug Fixes

Features

  • analytics-browser: add heartbeat service to video tracker (#1839) (cecda1b)

@​amplitude/analytics-browser@​2.46.0

2.46.0 (2026-09-21)

Features

  • analytics-react-native: support Remote Config autocapture (#1988) (eef3342)
Commits
  • eb0ebc7 chore(release): publish
  • 0e341de feat(plugin-web-vitals-browser): @​experimental add reportSoftNav option for s...
  • f878f00 chore: more tweaks to hackathon project (#1935)
  • dc7805f chore: add local testing extension (#1931)
  • d9de021 feat: hackathon client configurator (#1930)
  • e49de5f chore(release): publish
  • eef3342 feat(analytics-react-native): support Remote Config autocapture (#1988)
  • c4c8fb7 refactor(analytics-react-native): add "storage" object to react native config...
  • 521bcdf refactor(analytics-react-native): inject storage into diagnostics client (#2003)
  • f2fbbdf refactor(analytics-react-native): add "storage" object to react native config...
  • Additional commits viewable in compare view

Updates agentic-flow from 2.1.2 to 2.1.3

Release notes

Sourced from agentic-flow's releases.

v2.1.3 — Windows fix, cleaner local model routing, jujutsu compatibility

agentic-flow v2.1.3 — Windows fix, cleaner local model routing, jujutsu compatibility

What is agentic-flow?

agentic-flow lets you run Claude Code (or the Claude Agent SDK) against cheaper or fully local AI models instead of always paying for the most expensive one, and then take whatever agent you built and deploy it as a real hosted service. It bundles a router that picks the right model for the job, a memory system (AgentDB) so agents remember what they've learned, and a set of provider integrations (OpenRouter, Ollama, local ONNX models, and more) so you're not locked into one vendor.

What's in this release

This is a patch release — a cleanup pass that closed out a backlog of pull requests, fixed one real Windows crash, and shipped a handful of small, well-verified bug fixes. Nothing here changes how you use agentic-flow; everything is either invisible (a bug you'd only hit in specific conditions) or additive (new example code, a security policy document).

🪟 Fixed a Windows-only crash in local model loading

If you were running agentic-flow's local ONNX inference path on Windows, importing certain modules could crash immediately — even in code paths that never actually used ONNX at all — because the native binding was being loaded as a side effect of just importing the file, and that native binding can't load on some Windows setups. It's now loaded lazily, only when you actually try to run a local model. We verified this fix empirically (not just by reading the code): we reproduced the exact crash-on-import behavior, confirmed the fix removes it, and confirmed the model still loads correctly the moment it's actually needed.

🧵 Fixed a startup crash on newer Node.js

agentdb-cli.ts used a variable (__dirname) that isn't available in modern JavaScript modules, causing it to crash at startup in some environments. Fixed to use the standard modern equivalent.

🔧 jj (Jujutsu) version control support brought up to date

If you use agentic-flow's Jujutsu integration, branch operations (create/delete/list) now use the current jj bookmark command instead of the old jj branch command, which newer versions of Jujutsu (0.21+) removed entirely. Also added the missing macOS Apple Silicon (arm64) build of the Jujutsu bindings, so installs on Apple Silicon Macs no longer silently fall back to an unoptimized path.

🔌 Fully local, no-API-key setup is more reliable

If you run agentic-flow entirely offline against a local model (no cloud API key at all), several small threading issues in how the proxy port, the Ollama provider, and local model file paths were passed around are now fixed — this path should now "just work" more consistently.

📚 32 new example applications

Added a large batch of example projects demonstrating agentic-flow in more advanced scenarios (protein-folding consensus, Byzantine fault-tolerant coordination, peer-to-peer game content generation, and more) — useful as starting points if you're building something ambitious.

🔐 Added a SECURITY.md

A starting point for how to report security issues in this project.

Behind the scenes

We also did a broader cleanup of the project's pull request backlog — closing out several PRs whose underlying bugs had already been fixed a different way elsewhere, a couple that turned out to be unrelated content mistakenly opened against this repo, and one that didn't hold up to a live fact-check. The full reasoning for every decision is documented in ADR-078, and one unrelated-but-real finding (a security gap in an in-progress OAuth feature over in the RuVector project) was flagged there for its author to fix before merging.

We also found and filed a real bug in npm itself that currently blocks the standard npm audit fix command from running in this project — tracked for whoever picks it up next.

Upgrading

npm install agentic-flow@latest
# or, if you use npx:
npx agentic-flow@latest --version   # should print 2.1.3

No action needed — every change above is either invisible unless you were hitting the specific bug, or purely additive.

🤖 Generated with RuFlo

Commits

Updates react-router-dom from 7.18.3 to 7.18.4

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

Commits

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

  • Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
    • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
    • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Documentation

Other

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 511d68a tailwind-merge@3.7.0
  • 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
  • 9d41508 add changelog for tailwind-merge@3.7.0
  • c78a80f Configurator: Reuse runtime lookups during pruning
  • 49c317d Monorepo: Fix contributing link and include package coverage
  • 7b565ca Configurator: prune a generated config to a project's used classes (core step)
  • d83e013 Releases: auto-re-pin tag-pinned links on every version bump
  • b71fd41 Docs: pin every in-repo file link to a release tag instead of main
  • ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
  • 9521b10 Releases: per-package pipeline with namespaced tags
  • Additional commits viewable in compare view

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

  • deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.


Updates @types/node from 26.5.1 to 26.6.2

Commits

Updates @vitest/coverage-v8 from 5.0.0 to 5.0.1

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates autoprefixer from 10.5.6 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Changelog

Sourced from autoprefixer's changelog.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Commits

Updates jsdom from 30.0.1 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view

Updates ruflo from 3.41.2 to 3.45.0

Release notes

Sourced from ruflo's releases.

v3.45.0 — upgrades stop leaving a stale memory package behind

RuFlo 3.45.0: upgrades stop leaving a stale memory package behind

Released 24 September 2026. Upgrade:

npx ruflo@latest --version    # should print: ruflo v3.45.0

The short version

  • A fix that spans two packages now reaches you together. npx @claude-flow/cli@latest reuses one cache folder across versions, and npm keeps an older @claude-flow/memory that still fits the allowed range. So an upgrade could quietly leave you on the old memory package, with nothing reporting a problem. The CLI now asks for one exact memory version, so a stale copy can no longer pass. (#3392)
  • ruflo doctor tells you when it happens anyway. A new check, @claude-flow/memory version, compares the memory package the CLI actually loads with the one it asks for. If they differ it warns and prints the command to clear the cache. It is a warning, not a failure, so it never changes doctor's exit code. Try it with ruflo doctor --component memory-package.
  • Running the test suite no longer edits your own config. One test ran the real init against your home folder, adding to ~/.claude/CLAUDE.md and ~/.codex/config.toml and leaving a background download running. It now uses a throwaway home. This is a test-only change. (#3370)

Checked

With memory alpha.24 already installed, adding the old cli@3.44.0 left it at alpha.24. Adding the published cli@3.45.0 upgraded it to alpha.25, and the new check reports it satisfied.

Known gaps

  • The ruflo wrapper still allows any @claude-flow/cli from 3.33.0 up, so npx ruflo@latest can still run an older cached CLI (#3306). Use an explicit version when checking.
  • The signed witness manifests were regenerated from a source-only checkout. The entries that point at build output are carried forward unchanged, not re-checked, so their "verified" count is not fresh. A regeneration on a fully built tree is the follow-up.
  • @claude-flow/mcp on npm still ships the old shell-based github-safe.js helper (#3411). The fix is in review as #3412 and is not part of this release.

v3.44.0 — the agent picker gets fixed on your machine, and gets measured

RuFlo 3.44.0: the agent picker gets fixed on your machine, and gets measured

Released 23 September 2026. Upgrade:

npx ruflo@latest --version    # should print: ruflo v3.44.0

The short version

  • The word-matching fix from 3.43.0 now reaches your computer. The file that picks agents for your prompts was never updated after it was first installed. It now updates itself.
  • A new, optional, smarter agent picker uses a real language model instead of comparing spelling. It's off by default. Turn it on with one setting.
  • We built a test to decide which picker should be the default, and ran it. The honest result: none of the new options met the bar yet, so the default stays as it is. The numbers are below.

1. Your installed agent picker now updates itself

Every time you type a prompt in Claude Code, RuFlo's hook suggests which kind of agent should handle it. It does this with a small file, router.js, in ~/.claude/helpers/.

... (truncated)

Commits
  • d921b20 chore(release): 3.45.0
  • 0a96fb8 chore(release): 3.44.0
  • 025842b chore(release): 3.43.0
  • cf9aebf chore(release): 3.42.5 + @​claude-flow/memory 3.0.0-alpha.25
  • e558f0c chore(release): 3.42.0 -> 3.42.4 — smart search score semantics fix (#3327/#3...
  • 2602b64 chore(release): 3.42.0 — dream-cycle backlog batch (14 PRs)
  • See full diff in compare view

Updates sass-embedded from 1.104.0 to 1.105.0

Changelog

Sourced from sass-embedded's changelog.

1.105.0

  • Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

  • Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

  • Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

  • Add a SassModule class and a corresponding Value.assertModule() method.

1.104.1

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

Commits
  • 8818f40 Update Dart Sass version and release
  • 15d6185 [meta.load] Add support for first-class modules (#446)
  • aa4ed87 Update Dart Sass version and release
  • dbfd5a2 Bump dart-lang/setup-dart from 1.7.2 to 1.8.1 (#444)
  • See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
  • optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
  • server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
  • sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

Code Refactoring

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
  • optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
  • server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
  • sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

Code Refactoring

Commits
  • 39ddf7c release: v8.3.1 (#23573)
  • f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
  • 6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
  • 04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
  • 5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
  • 63567c7 chore(optimizer...

    Description has been truncated

@dependabot
deps(deps): bump the minor-and-patch group across 1 directory with 15…
4737d5e 
… updates

Bumps the minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@amplitude/analytics-browser](https://github.com/amplitude/Amplitude-TypeScript) | `2.45.8` | `2.47.0` |
| [agentic-flow](https://github.com/ruvnet/agentic-flow) | `2.1.2` | `2.1.3` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.3` | `7.18.4` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.6` | `10.6.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.1` |
| [ruflo](https://github.com/ruvnet/claude-flow/tree/HEAD/ruflo) | `3.41.2` | `3.45.0` |
| [sass-embedded](https://github.com/sass/embedded-host-node) | `1.104.0` | `1.105.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.1` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.63.1` | `4.63.5` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.1` | `4.23.15` |



Updates `@amplitude/analytics-browser` from 2.45.8 to 2.47.0
- [Release notes](https://github.com/amplitude/Amplitude-TypeScript/releases)
- [Commits](https://github.com/amplitude/Amplitude-TypeScript/compare/@amplitude/analytics-browser@2.45.8...@amplitude/analytics-browser@2.47.0)

Updates `agentic-flow` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/ruvnet/agentic-flow/releases)
- [Changelog](https://github.com/ruvnet/agentic-flow/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/ruvnet/agentic-flow/commits/v2.1.3)

Updates `react-router-dom` from 7.18.3 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@types/node` from 26.5.1 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/coverage-v8)

Updates `autoprefixer` from 10.5.6 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.6...10.6.1)

Updates `jsdom` from 30.0.1 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.1)

Updates `ruflo` from 3.41.2 to 3.45.0
- [Release notes](https://github.com/ruvnet/claude-flow/releases)
- [Changelog](https://github.com/ruvnet/ruflo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ruvnet/claude-flow/commits/v3.45.0/ruflo)

Updates `sass-embedded` from 1.104.0 to 1.105.0
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.104.0...1.105.0)

Updates `vite` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `vitest` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

Updates `@rollup/rollup-linux-x64-gnu` from 4.63.1 to 4.63.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.63.1...v4.63.5)

Updates `tsx` from 4.22.1 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.1...v4.23.15)

---
updated-dependencies:
- dependency-name: "@amplitude/analytics-browser"
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: agentic-flow
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruflo
  dependency-version: 3.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sass-embedded
  dependency-version: 1.105.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.63.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions github-actions Bot added the triage Waiting triage label Sep 28, 2026
@cjlapao
cjlapao merged commit a010160 into main Sep 29, 2026
9 checks passed
@cjlapao
cjlapao deleted the dependabot/npm_and_yarn/minor-and-patch-aea6ac13e1 branch September 29, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cjlapao cjlapao cjlapao approved these changes
@alevlasu alevlasu Awaiting requested review from alevlasu alevlasu is a code owner
@sai-kumar-peddireddy sai-kumar-peddireddy Awaiting requested review from sai-kumar-peddireddy

Assignees

No one assigned

Labels

dependencies npm triage Waiting triage

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cjlapao