Skip to content

build(deps): bump the bun group with 5 updates - #390

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-7599822f61
Open

build(deps): bump the bun group with 5 updates#390
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-7599822f61

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the bun group with 5 updates:

Package From To
knip 6.42.1 6.43.0
@tanstack/react-virtual 3.14.21 3.14.22
framer-motion 14.5.0 14.6.0
kysely 0.29.6 0.29.7
yahoo-finance2 4.0.3 4.0.5

Updates knip from 6.42.1 to 6.43.0

Release notes

Sourced from knip's releases.

Release 6.43.0

  • Document and pin exports that only keep each other alive (#2160) (39af70abb32523a992a7d6152b8cd95ef317f237)
  • Don't add config files without an extension as entry files (resolve #2168) (46a825ddf15d3073b899ed6ef34689e5da5508f2)
  • Recognize unscoped ~name workspace packages (resolve #2172) (ba527f7386e7741507f2f18d84864058e02ac907)
  • Follow imports and re-exports in ambient modules (resolve #2174) (dbd3a8b8b0429433e5385371c09e805b808a32c2) - thanks @​tlq5l!
  • Follow @reference in Tailwind CSS compiler (#2177) (219f16de95e174cdcfd6a90782bcef13cf79bd64) - thanks @​mkantautas!
  • Support { find, replacement } array form of Vite alias (#2179) (5d0779bc4cf8c0469c50d5b2cda1a6bd1f053d81) - thanks @​mkantautas!
  • fix(expo): treat local config plugins as entry files (#2176) (100ef491509a88b00ea9956ba40dbc1b0ac0c205) - thanks @​Cayan!
  • fix(next): detect Turbopack loaders in shared config factories (#2161) (9cf928be5022928a38c12fe8001cec7bf467040c) - thanks @​jakeleventhal!
  • Ignore osascript as global binary (#2182) (c301e44c7975442d4d25595f084e6b853f07a434) - thanks @​abrahamguo!
  • Skip --fix for exports in multi-declarator variable statements (#2178) (326afd9c1e66eef04d986b83ed829b506f506c48) - thanks @​mkantautas!
  • Watch the project directory instead of process.cwd() (#2183) (16d9932d0239f649cf2c1349cc7bc893850cd4f0) - thanks @​abrahamguo!
  • Follow directory paths in tsconfig references (#2186) (d741c46e3f2a9caaf6bf4e81e9d4c8cfca48623e) - thanks @​mkantautas!
  • Handle @plugin options blocks in Tailwind CSS compiler (#2187) (9fae773eb75bcba03e62f44ce3e9aa0b889bf4ac) - thanks @​mkantautas!
  • Remove anonymous default-exported functions and classes in --fix (#2188) (6748259fbb2ea9a5940ea3861626f77677610a86) - thanks @​mkantautas!
  • Recognize bun fmt as a built-in command (#2189) (e971b0924bcb7ff8dcab01a180d3016cc08b675d) - thanks @​TomasHubelbauer!
  • Add plugin for @​bufbuild/buf (#2142) (90216c261c2273967125669beb611bf763d762c7) - thanks @​ryanquinn3!
  • Pass isSsrBuild to Vite config functions (#2191) (d2aa101c55e5d7e8d26548808ce008b214622099) - thanks @​mkantautas!
  • Follow src of <script> and <style> blocks in Vue SFCs (#2193) (3d148393d5129a096a182fab36a873b9f710f388) - thanks @​mkantautas!
  • Remove import attributes with emptied re-exports in --fix (#2192) (231026cf9c21cc7890f21d048f4af6ea7233d7b8) - thanks @​mkantautas!
  • Update npmx.dev snapshot (b2cc439006ec98ff5bbc1c99b99bc1ac5203b6b2)
  • Read string parserOptions.parser in ESLint flat configs (#2198) (302f908aa135669d6fe96869ec6452b7570856a4) - thanks @​mkantautas!
  • Resolve directory matches in Vitest test.projects to their config (#2195) (4d386138011c27e01e6e910be6d58266e07c9cf1) - thanks @​fixfon!
  • Ignore custom elements named script-* when extracting script blocks (#2199) (23e6479b233e1882ddaf29736390309d0f3f040f) - thanks @​mkantautas!
  • feat(mcp): add MCP plugin (#2180) (fc92470a9f687e2f1da60b84612ebf3e59a8bbb9) - thanks @​jakeleventhal!
  • Handle non-Error plugin config failures (8f21ea2182fac5a96edd7d6d4280a0fa1051e434)
  • Update articles list (6569cdcde1a79a6196a35a934b6c0d9d0e23faa4)
  • Skip --fix export ranges inside a larger removal (204a8091baf91cb8cfb4e7a9aa70d461cc926baa)
  • Detect .travis.yml with a stat instead of a glob (3601c6e32afef3d1d76a3944e540225da5190b9b)
  • Mark YAML catalog entries fixed only when their line is removed (#2201) (813fa30e55ef3a8ed749d9d6d5a02a00810cfe72) - thanks @​mkantautas!
  • Add Electron Forge plugin (#2158) (12e4355a43ea63c417d3b9ebfbbac1c8510b139e) - thanks @​mehdimirzafaruk!
  • Resolve function and promise entries in Vitest test.projects (#2197) (ec293d1a33d30a8b0521725d1148e6e72c6e4220) - thanks @​mkantautas!
  • Follow npm lifecycle scripts and run-script aliases (#2202) (89dfdc881e6865aef326c2b9dc700cf5c46b73b4) - thanks @​sushanta-neupane!
  • Follow pnpm t, tst and run-script aliases (ce91e230e0823433dfcc1ee4562335c34d2b73ef)
  • Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils) (db9aa7443c5b3839df5c0fe320d78ea42f0f3446)
  • Ignore tool output before the first report section in ecosystem snapshots (9434bf678e60d16832f13e892d7c1ebc2b9e6ed1)
  • Update dependencies (21c3b75fc4ae94208311abb630ff129fcd9fe820)
  • Bump engines.node to follow Astro's (9d7a5e07212b093f9d422cab813fad5d01273fc6)
Commits
  • 0712156 Release knip@6.43.0
  • 21c3b75 Update dependencies
  • db9aa74 Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils)
  • ce91e23 Follow pnpm t, tst and run-script aliases
  • 89dfdc8 Follow npm lifecycle scripts and run-script aliases (#2202)
  • ec293d1 Resolve function and promise entries in Vitest test.projects (#2197)
  • 12e4355 Add Electron Forge plugin (#2158)
  • 813fa30 Mark YAML catalog entries fixed only when their line is removed (#2201)
  • 3601c6e Detect .travis.yml with a stat instead of a glob
  • 204a809 Skip --fix export ranges inside a larger removal
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.21 to 3.14.22

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.22

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.22

Patch Changes

Commits

Updates framer-motion from 14.5.0 to 14.6.0

Changelog

Sourced from framer-motion's changelog.

[14.6.0] 2026-10-22

Added

  • Reorder: Grab-and-move keyboard reordering.
  • processFrame: Manually process the frameloop at t.
  • stepFrames: For tests, synchronously advance frameloop time by duration.

Fixed

  • Improved tree-shaking.
  • motion: Fix layoutId elements jumping in some situations.
  • Reorder: Make auto-scroll speed independent of refresh rate.
  • drag: Fix animations when disabling drag from within onDrag.
  • Fix shared layout animations applying an element's own scale/x/y twice.
  • Fix replaying mount animation when an element takes over a layoutId.
  • motion: Fix updating SVG styles.
  • useTransform: Improving value resolution.
Commits
  • 3397236 v14.6.0
  • 9c418ac Updating changelog
  • b6c08e2 Updating changelog
  • ab673fa updating changelog
  • dae190c Merge pull request #3957 from motiondivision/claude/project-thread-6xvf1o-iss...
  • 2393112 Merge branch 'main' into claude/project-thread-6xvf1o-issue-2658
  • 27e22d2 Merge pull request #3964 from motiondivision/claude/project-thread-f58pn3
  • 286e7ee Merge pull request #3967 from motiondivision/claude/project-thread-lo4wo4-iss...
  • d555095 Clarify that a callback scheduling itself behaves as before
  • 0f0b22f Merge pull request #3974 from motiondivision/claude/project-thread-f58pn3-siz...
  • Additional commits viewable in compare view

Updates kysely from 0.29.6 to 0.29.7

Release notes

Sourced from kysely's releases.

0.29.7

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

Controlled transactions get fixes for connection leaks, shared completion state, and commands racing with ongoing queries:

  • Commit, rollback, and savepoint commands now wait for ongoing queries and streams to finish.
  • Close or exhaust active streams before awaiting these commands.
  • A failed rollback now releases the connection and marks the transaction as rolled back.

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

MSSQL 🥅

📖 Documentation

... (truncated)

Commits
  • ac876c2 0.29.7
  • e50ef04 docs: clarify shared pool and database instance lifecycles (#2143)
  • af446a0 fix(postgres): release the client when destroyed while acquiring a connection...
  • 9db0d49 chore: bump deps. (#2142)
  • 59841c3 fix: serialize controlled transaction commands with queries (#2081)
  • 3037377 ci: add registry fallbacks and reuse the SQL Server image (#2140)
  • cbe5eb6 fix: release controlled transaction connection when rollback fails (#2136)
  • fcc56f5 fix(site): respect reduced motion and add demo playback control (#2130)
  • 5048e23 docs(site): remove duplicate intro help paragraph (#2133)
  • 9a873eb fix: share completion state between controlled transaction handles (#2090)
  • Additional commits viewable in compare view

Updates yahoo-finance2 from 4.0.3 to 4.0.5

Release notes

Sourced from yahoo-finance2's releases.

v4.0.5

4.0.5 (2026-10-21)

Bug Fixes

v4.0.4

4.0.4 (2026-10-15)

Bug Fixes

  • ci: verify manually dispatched schema repairs (841bebf)
  • schema: repair Yahoo response drift (#1032) (51ca356)
  • trendingSymbols: accept Yahoo keyVersion response field (f2a6507), closes #1030
  • validation: skip version checks in development builds (6a3d672)
Commits
  • 9e9f73a fix(schema): repair Yahoo response drift (#1041) (#1042)
  • f7233e0 test(fixtures): record Yahoo API drift for trendingSymbols
  • 881d0b3 fix(screener): normalize new listing dates (#1039)
  • c08267f docs(validation): reuse shared date conversion coverage
  • 80c1c7b chore(validation): enforce normalized date contracts
  • 8cbd269 test(fixtures): record Yahoo API drift for screener
  • 756f3f4 chore(docs): fix typos in README.md (#1036)
  • 93bb36d ci(workflows): separate development checks from releases
  • 16c56fd fix(schema): repair Yahoo response drift (#1034) (#1035)
  • 2d7ebd7 fix(ci): allow guarded string-literal union additions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the bun group with 5 updates
62ded83 
Bumps the bun group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.42.1` | `6.43.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.21` | `3.14.22` |
| [framer-motion](https://github.com/motiondivision/motion) | `14.5.0` | `14.6.0` |
| [kysely](https://github.com/kysely-org/kysely) | `0.29.6` | `0.29.7` |
| [yahoo-finance2](https://github.com/gadicc/yahoo-finance2) | `4.0.3` | `4.0.5` |


Updates `knip` from 6.42.1 to 6.43.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.43.0/packages/knip)

Updates `@tanstack/react-virtual` from 3.14.21 to 3.14.22
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.22/packages/react-virtual)

Updates `framer-motion` from 14.5.0 to 14.6.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.5.0...v14.6.0)

Updates `kysely` from 0.29.6 to 0.29.7
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](kysely-org/kysely@v0.29.6...v0.29.7)

Updates `yahoo-finance2` from 4.0.3 to 4.0.5
- [Release notes](https://github.com/gadicc/yahoo-finance2/releases)
- [Changelog](https://github.com/gadicc/yahoo-finance2/blob/dev/release.config.mjs)
- [Commits](gadicc/yahoo-finance2@v4.0.3...v4.0.5)

---
updated-dependencies:
- dependency-name: knip
  dependency-version: 6.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: framer-motion
  dependency-version: 14.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: kysely
  dependency-version: 0.29.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: yahoo-finance2
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants