Skip to content

chore(deps): bump the npm-minor-patch group with 25 updates - #2100

Merged
giswqs merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e18f8ddf2d
Aug 25, 2026
Merged

chore(deps): bump the npm-minor-patch group with 25 updates#2100
giswqs merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e18f8ddf2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 25 updates:

Package From To
eslint 10.8.1 10.9.0
@anthropic-ai/sdk 0.117.1 0.120.0
@auth0/auth0-react 2.24.0 2.24.1
@carbonplan/zarr-layer 0.8.0 0.9.0
@clerk/react 6.14.3 6.14.5
@geoman-io/maplibre-geoman-free 0.9.0 0.9.1
@google/genai 2.17.1 2.18.0
@strands-agents/sdk 1.13.0 1.14.0
@tanstack/react-virtual 3.14.9 3.14.10
dompurify 3.4.13 3.4.14
html2canvas-pro 2.3.8 2.3.9
i18next 26.3.6 26.4.0
maplibre-gl 6.3.0 6.5.0
openai 7.4.0 7.5.0
react-i18next 17.0.11 17.0.12
@vitejs/plugin-react 6.0.5 6.1.0
vite 8.2.1 8.2.2
uuid 14.0.1 14.0.2
fast-xml-parser 5.10.1 5.11.0
@loaders.gl/i3s 4.4.4 4.4.5
geotiff-geokeys-to-proj4 2026.8.13 2026.8.16
@turf/bearing 7.3.5 7.4.0
lucide-react 1.31.0 1.33.0
wrangler 4.123.0 4.125.0
@cloudflare/workers-types 5.20260815.1 5.20260822.1

Updates eslint from 10.8.1 to 10.9.0

Release notes

Sourced from eslint's releases.

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])
Commits

Updates @anthropic-ai/sdk from 0.117.1 to 0.120.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.120.0

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

sdk: v0.119.0

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

sdk: v0.118.0

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

  • api: additions to files and memory stores (fdc0379)
  • api: updates to skill, files, and user profiles (671e6b1)
  • client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

  • api: remove unsupported mid_conv_system content block (ae6ca94)
  • session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

  • internal: bump zod to 4.4.3 (#334) (faa5b7b)
  • internal: remove leftover prism references (a163b96)
  • stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

  • api: additions to files and memory stores (fdc0379)
  • api: updates to skill, files, and user profiles (671e6b1)
  • client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

  • api: remove unsupported mid_conv_system content block (ae6ca94)
  • session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

  • internal: bump zod to 4.4.3 (#334) (faa5b7b)
  • internal: remove leftover prism references (a163b96)
  • stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

  • tools: warn that blocking tool bodies stall the worker heartbeat (#299) (908fdb5)
Commits
  • bfa9197 chore: release main
  • bc167f3 feat(api): managed agents web search config and self hosted sandbox memory
  • 83fd898 chore(internal): use a single pnpm workspace lockfile (#359)
  • 7fe6dd5 remove internal ticket references from changelog- #360
  • c67e4e2 chore: release main
  • 50fc0db feat(api): Files and Skills APIs are now GA; add computer use and browser use...
  • 18ea26d chore: release main
  • 6ed9ddd feat(api): updates to skill, files, and user profiles
  • 91921f5 fix(session-runner): retry tool-result sends for at least the lease TTL (#339)
  • 142adcc docs(tools): warn that blocking tool bodies stall the worker heartbeat (#299)
  • Additional commits viewable in compare view

Updates @auth0/auth0-react from 2.24.0 to 2.24.1

Release notes

Sourced from @​auth0/auth0-react's releases.

v2.24.1

Fixed

  • fix: update import style in useAuth0Suspense for compatibility with React older version #1206 (gyaneshgouraw-okta)
Changelog

Sourced from @​auth0/auth0-react's changelog.

v2.24.1 (2026-08-18)

Full Changelog

Fixed

  • fix: update import style in useAuth0Suspense for compatibility with React older version #1206 (gyaneshgouraw-okta)
Commits
  • 03a8acc chore(release): v2.24.1 (#1209)
  • 363c61c chore(deps): bump cypress-io/github-action from 7.4.1 to 7.4.2 (#1208)
  • 6608dbe fix: update import style in useAuth0Suspense for compatibility with React old...
  • 8e499f9 chore(deps-dev): bump the typescript-eslint group across 1 directory with 2 u...
  • f47c5e9 chore: skip coderabbit on dependabot and release PRs (#1203)
  • c178c36 chore: group @​typescript-eslint deps in dependabot (#1202)
  • b90e3d9 chore(deps-dev): bump cypress from 15.20.0 to 15.20.1 (#1201)
  • See full diff in compare view

Updates @carbonplan/zarr-layer from 0.8.0 to 0.9.0

Release notes

Sourced from @​carbonplan/zarr-layer's releases.

v0.9.0

What's Changed

Full Changelog: carbonplan/zarr-layer@v0.8.0...v0.9.0

Commits
  • 030a92d 0.9.0
  • de69d5a Merge pull request #85 from carbonplan/Shane98c/render-cleanup
  • 9c55112 clean up outdated and confusing terminology
  • 8577aa0 Clarify local mesh coordinate model
  • de8f551 Remove obsolete non-indexed render path
  • 3a60ab2 Merge pull request #84 from carbonplan/query-readiness
  • a70b5c5 Reject a query whose layer was removed while it ran
  • c2c8dbf Propagate failed query reads instead of returning empty
  • af1bbda Scope the readiness contract to readiness failures
  • c218b06 Correct the cost described for finest-level queries
  • Additional commits viewable in compare view

Updates @clerk/react from 6.14.3 to 6.14.5

Release notes

Sourced from @​clerk/react's releases.

@​clerk/react@​6.14.5

Patch Changes

  • Updated dependencies [ea8cb05]:
    • @​clerk/shared@​4.29.3

@​clerk/react@​6.14.4

Patch Changes

  • Updated dependencies [b815047]:
    • @​clerk/shared@​4.29.2
Changelog

Sourced from @​clerk/react's changelog.

6.14.5

Patch Changes

  • Updated dependencies [ea8cb05]:
    • @​clerk/shared@​4.29.3

6.14.4

Patch Changes

  • Updated dependencies [b815047]:
    • @​clerk/shared@​4.29.2
Commits

Updates @geoman-io/maplibre-geoman-free from 0.9.0 to 0.9.1

Release notes

Sourced from @​geoman-io/maplibre-geoman-free's releases.

v0.9.1

Changed

  • Updated dependencies to their latest versions. The only change that reaches the published packages is @turf/* 7.3.5 → 7.4.0 and type-fest 5.7.0 → 5.8.0; everything else is tooling. Peer dependency ranges are unchanged, and the public API, bundles and type declarations are identical to 0.9.0 (#225).
  • Build toolchain moved to TypeScript 7 and Node 26. This is internal only — the packages declare no engines constraint, so consumers on older toolchains are unaffected (#226).
Changelog

Sourced from @​geoman-io/maplibre-geoman-free's changelog.

[0.9.1] - 2026-08-17

Changed

  • Updated dependencies to their latest versions. The only change that reaches the published packages is @turf/* 7.3.5 → 7.4.0 and type-fest 5.7.0 → 5.8.0; everything else is tooling. Peer dependency ranges are unchanged, and the public API, bundles and type declarations are identical to 0.9.0 (#225).
  • Build toolchain moved to TypeScript 7 and Node 26. This is internal only — the packages declare no engines constraint, so consumers on older toolchains are unaffected (#226).
Commits
  • 71699cc chore(release): prep v0.9.1
  • 6c5375f chore(deps): move build toolchain to TypeScript 7 and Node 26 (#226)
  • 588e5b7 test(e2e): use the full Chromium build locally, not the headless shell (#224)
  • 629dcf3 chore(deps): update dependencies to latest (#225)
  • 167450c chore(deps-dev): bump rollup from 4.62.0 to 4.62.4 (#216)
  • e1ab920 chore(deps-dev): bump svelte from 5.56.3 to 5.56.8 (#217)
  • 5bdcf59 ci(deps): bump actions/cache from 5 to 6 (#213)
  • 532c0a3 ci(deps): bump actions/setup-node from 6 to 7 (#218)
  • 6bfe9a0 chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 up...
  • See full diff in compare view

Updates @google/genai from 2.17.1 to 2.18.0

Release notes

Sourced from @​google/genai's releases.

v2.18.0

2.18.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (4c5208b)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (f52c208)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (2f110f2)
  • add video resolution and extension task parameters (39b2a2d)

Bug Fixes

Changelog

Sourced from @​google/genai's changelog.

2.18.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (4c5208b)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (f52c208)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (2f110f2)
  • add video resolution and extension task parameters (39b2a2d)

Bug Fixes

Commits
  • 128781f chore(main): release 2.18.0 (#1856)
  • 67f4cf7 chore: Internal Changes
  • 2f110f2 feat: Add IDLE state to live connection status enum and mark REQUIRES_ACTION ...
  • 3f631be fix: fix examples
  • 4c5208b feat: Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and...
  • f52c208 feat: Add enable_data_retention to ToolParallelAiSearch, Add step_count to Re...
  • 39b2a2d feat: add video resolution and extension task parameters
  • See full diff in compare view

Updates @strands-agents/sdk from 1.13.0 to 1.14.0

Release notes

Sourced from @​strands-agents/sdk's releases.

python/v1.14.0

Major Features

Structured Output via Agentic Loop

Agents can now validate responses against predefined schemas using JSON Schema or Pydantic models. Validation occurs at response generation time with configurable retry behavior for non-conforming outputs.

agent = Agent()
result = agent(
    "John Smith is a 30 year-old software engineer",
    structured_output_model=PersonInfo
)

Access the structured output from the result

person_info: PersonInfo = result.structured_output

See more in the docs for Structured Output.

Interrupting Agents

Interrupts now provide first-class support for Human-in-the-loop patterns in Strands. They can be raised in Hooks or directly in tool definitions. Related, MCP elicitation has been exposed on the MCPClient.

import json
from typing import Any
from strands import Agent, tool
from strands.hooks import BeforeToolCallEvent, HookProvider, HookRegistry
from my_project import delete_files, inspect_files
class ApprovalHook(HookProvider):
def init(self, app_name: str) -> None:
self.app_name = app_name
def register_hooks(self, registry: HookRegistry, **kwargs: Any) -> None:
    registry.add_callback(BeforeToolCallEvent, self.approve)
def approve(self, event: BeforeToolCallEvent) -> None:
if event.tool_use["name"] != "delete_files":
return
approval = event.interrupt(f"{self.app_name}-approval", reason={"paths": event.tool_use["input"]["paths"]})
if approval.lower() != "y":
    event.cancel_tool = "User denied permission to delete files"


agent = Agent(
</tr></table>

... (truncated)

Commits
  • c2ba0f7 Transform invalid tool usages on sending, not on initial detection (#1091)
  • 104ecb5 fix(litellm): enhance structured output handling (#1021)
  • 49e432d mcp elicitation (#1094)
  • 071f89f direct tool call - interrupt not allowed (#1097)
  • 2147920 feat: skip model invocation when latest message contains ToolUse (#1068)
  • 73865d3 fix (bug): retry on varying Bedrock throttlingexception cases (#1096)
  • 3446938 feat(mcp): add experimental agent managed connection via ToolProvider (#895)
  • 999e654 fix: Don't bail out if there are no tool_uses (#1087)
  • 1544384 ci: add pr size labeler (#1082)
  • d4ef8bf interrupt - docstring - fix formatting (#1074)
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates html2canvas-pro from 2.3.8 to 2.3.9

Release notes

Sourced from html2canvas-pro's releases.

v2.3.9

Please refer to CHANGELOG.md for details.

Changelog

Sourced from html2canvas-pro's changelog.

2.3.9 (2026-08-18)

Bug Fixes

  • adjust mask rectangle anchoring to prevent inverted inset box-shadow rendering (67d21ac)
Commits
  • a814371 chore(release): v2.3.9
  • 67d21ac fix: adjust mask rectangle anchoring to prevent inverted inset box-shadow ren...
  • See full diff in compare view

Updates i18next from 26.3.6 to 26.4.0

Release notes

Sourced from i18next's releases.

v26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Changelog

Sourced from i18next's changelog.

26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Commits

Updates maplibre-gl from 6.3.0 to 6.5.0

Release notes

Sourced from maplibre-gl's releases.

v6.5.0

✨ Features and improvements

  • Add experimental ImageSource.setWarp and ImageSource.getWarp, choosing between a auto, perspective and a flat warp of the image (#8172) (by @​HarelM)

🐞 Bug fixes

  • Fixed incorrect image source on projection on globe view (#8172) (by @​HarelM)
  • Fix the globe zooming itself in when panned away from a pole at the minimum zoom, where the latitude zoom compensation was applied on top of the constrain's own clamp (#8182) (by @​mondsichtung)
  • Fix dragging the globe from the empty space around it, which barely moved the map and often in the wrong direction (#8174) (by @​mondsichtung)

v6.4.1

🐞 Bug fixes

  • Fix DOM.sanitize leaving dangerous attributes behind when multiple consecutive attributes are present. Iterating the live NamedNodeMap from elem.attributes while calling removeAttribute skipped the attribute directly after a removed one, so a second dangerous attribute (for example an ontoggle on a <details open> element) could survive sanitisation and later execute (#8189) (by @​0xKirisame)
  • Give custom layers the live globe transition in CustomRenderMethodInput.defaultProjectionData.projectionTransition, which was hardcoded to 1 for the whole globe/mercator transition, so a custom layer jumped straight to the fully bent globe while every other layer eased (#8169) (by @​mondsichtung)

v6.4.0

✨ Features and improvements

  • Avoid a per-query Array.sort() in cross-tile symbol matching (TileLayerIndex.findMatches), claiming the lowest-index unclaimed candidate in a single pass instead; reduces main-thread symbol-placement cost on dense/coincident symbol layers (#7797) (by @​pholmstr)
  • Use texelFetch for exact DEM and color-relief elevation stop lookups instead of normalized texture coordinate arithmetic (#7640) (by @​johncarmack1984)
  • Make default draggable markers keyboard-focusable and movable with the arrow keys (1 px per press, 10 px with Shift); custom marker elements stay application-owned (#8020) (by @​smmariquit)

🐞 Bug fixes

  • Fix a permanent frame rate degradation after switching styles: every sprite reload marked its images as updated forever, making every in-view tile re-check and re-upload them on every frame. Also stop leaking the images of a replaced sprite, which were never removed from the image manager (#8052) (by @​HarelM)
  • Prevent a rejected missing style image resolver from blocking successfully resolved images in the same batch (#8146) (by @​birkskyum)
  • Explicitly request no browser color management when decoding raster-DEM tiles so their RGB-encoded elevation values are not changed (what would otherwise happen with gfx.color_management.mode = 1 in Firefox) (#8125) (by @​tnikkel)
  • Let an abort reach an image or raster tile load that is still awaiting its transformRequest, so ImageSource.updateImage no longer loses the image it was just handed and an aborted tile is no longer fetched (#8071) (by @​mondsichtung)
  • Fix raster tiles fading in again when they are reloaded, briefly flashing the map background, most visibly when switching projection (#8106) (by @​mondsichtung)
  • Fix globe panning inverting and stalling near and across the poles by rotating the globe with a versor, keeping the drag direction consistent at every latitude. Panning also eases off as the cursor approaches the edge of the globe and continues past it, instead of stopping. The bearing is preserved while panning, as before (#5296) (by @​jcolot)
  • Fix fill-extrusion-rounded-corner-distance producing spikes: corner arcs now land on the integer tile grid, and corners created by tile clipping are left sharp (#8153) (by @​HarelM)
  • Fix a gesture which was held still before being released still flinging the map (#1303) (by @​zdila)
Changelog

Sourced from maplibre-gl's changelog.

6.5.0

✨ Features and improvements

  • Add experimental ImageSource.setWarp and ImageSource.getWarp, choosing between a auto, perspective and a flat warp of the image (#8172) (by @​HarelM)

🐞 Bug fixes

  • Fixed incorrect image source on projection on globe view (#8172) (by @​HarelM)
  • Fix the globe zooming itself in when panned away from a pole at the minimum zoom, where the latitude zoom compensation was applied on top of the constrain's own clamp (#8182) (by @​mondsichtung)
  • Fix dragging the globe from the empty space around it, which barely moved the map and often in the wrong direction (#8174) (by @​mondsichtung)

6.4.1

🐞 Bug fixes

  • Fix DOM.sanitize leaving dangerous attributes behind when multiple consecutive attributes are present. Iterating the live NamedNodeMap from elem.attributes while calling removeAttribute skipped the attribute directly after a removed one, so a second dangerous attribute (for example an ontoggle on a <details open> element) could survive sanitisation and later execute (#8189) (by @​0xKirisame)
  • Give custom layers the live globe transition in CustomRenderMethodInput.defaultProjectionData.projectionTransition, which was hardcoded to 1 for the whole globe/mercator transition, so a custom layer jumped straight to the fully bent globe while every other layer eased (#8169) (by @​mondsichtung)

6.4.0

✨ Features and improvements

  • Avoid a per-query Array.sort() in cross-tile symbol matching (TileLayerIndex.findMatches), claiming the lowest-index unclaimed candidate in a single pass instead; reduces main-thread symbol-placement cost on dense/coincident symbol layers (#7797) (by @​pholmstr)
  • Use texelFetch for exact DEM and color-relief elevation stop lookups instead of normalized texture coordinate arithmetic (#7640) (by @​johncarmack1984)
  • Make default draggable markers keyboard-focusable and movable with the arrow keys (1 px per press, 10 px with Shift); custom marker elements stay application-owned (#8020) (by @​smmariquit)

🐞 Bug fixes

  • Fix a permanent frame rate degradation after switching styles: every sprite reload marked its images as updated forever, making every in-view tile re-check and re-upload them on every frame. Also stop leaking the images of a replaced sprite, which were never removed from the image manager (#8052) (by @​HarelM)
  • Prevent a rejected missing style image resolver from blocking successfully resolved images in the same batch (#8146) (by @​birkskyum)
  • Explicitly request no browser color management when decoding raster-DEM tiles so their RGB-encoded elevation values are not changed (what would otherwise happen with gfx.color_management.mode = 1 in Firefox) (#8125) (by @​tnikkel)
  • Let an abort reach an image or raster tile load that is still awaiting its transformRequest, so ImageSource.updateImage no longer loses the image it was just handed and an aborted tile is no longer fetched (#8071) (by @​mondsichtung)
  • Fix raster tiles fading in again when they are reloaded, briefly flashing the map background, most visibly when switching projection (#8106) (by @​mondsichtung)
  • Fix globe panning inverting and stalling near and across the poles by rotating the glo...

    Description has been truncated

Bumps the npm-minor-patch group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.0` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.117.1` | `0.120.0` |
| [@auth0/auth0-react](https://github.com/auth0/auth0-react) | `2.24.0` | `2.24.1` |
| [@carbonplan/zarr-layer](https://github.com/carbonplan/zarr-layer) | `0.8.0` | `0.9.0` |
| [@clerk/react](https://github.com/clerk/javascript/tree/HEAD/packages/react) | `6.14.3` | `6.14.5` |
| [@geoman-io/maplibre-geoman-free](https://github.com/geoman-io/maplibre-geoman) | `0.9.0` | `0.9.1` |
| [@google/genai](https://github.com/googleapis/js-genai) | `2.17.1` | `2.18.0` |
| [@strands-agents/sdk](https://github.com/strands-agents/harness-sdk) | `1.13.0` | `1.14.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [html2canvas-pro](https://github.com/yorickshan/html2canvas-pro) | `2.3.8` | `2.3.9` |
| [i18next](https://github.com/i18next/i18next) | `26.3.6` | `26.4.0` |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `6.3.0` | `6.5.0` |
| [openai](https://github.com/openai/openai-node) | `7.4.0` | `7.5.0` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.11` | `17.0.12` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.2` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.10.1` | `5.11.0` |
| [@loaders.gl/i3s](https://github.com/visgl/loaders.gl) | `4.4.4` | `4.4.5` |
| [geotiff-geokeys-to-proj4](https://github.com/matafokka/geotiff-geokeys-to-proj4) | `2026.8.13` | `2026.8.16` |
| [@turf/bearing](https://github.com/Turfjs/turf) | `7.3.5` | `7.4.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.33.0` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.123.0` | `4.125.0` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260815.1` | `5.20260822.1` |


Updates `eslint` from 10.8.1 to 10.9.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.9.0)

Updates `@anthropic-ai/sdk` from 0.117.1 to 0.120.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.117.1...sdk-v0.120.0)

Updates `@auth0/auth0-react` from 2.24.0 to 2.24.1
- [Release notes](https://github.com/auth0/auth0-react/releases)
- [Changelog](https://github.com/auth0/auth0-react/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-react@v2.24.0...v2.24.1)

Updates `@carbonplan/zarr-layer` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/carbonplan/zarr-layer/releases)
- [Commits](carbonplan/zarr-layer@v0.8.0...v0.9.0)

Updates `@clerk/react` from 6.14.3 to 6.14.5
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/react@6.14.5/packages/react)

Updates `@geoman-io/maplibre-geoman-free` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/geoman-io/maplibre-geoman/releases)
- [Changelog](https://github.com/geoman-io/maplibre-geoman/blob/master/CHANGELOG.md)
- [Commits](geoman-io/maplibre-geoman@v0.9.0...v0.9.1)

Updates `@google/genai` from 2.17.1 to 2.18.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v2.17.1...v2.18.0)

Updates `@strands-agents/sdk` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/strands-agents/harness-sdk/releases)
- [Commits](strands-agents/harness-sdk@v1.13.0...v1.14.0)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `html2canvas-pro` from 2.3.8 to 2.3.9
- [Release notes](https://github.com/yorickshan/html2canvas-pro/releases)
- [Changelog](https://github.com/yorickshan/html2canvas-pro/blob/main/CHANGELOG.md)
- [Commits](yorickshan/html2canvas-pro@v2.3.8...v2.3.9)

Updates `i18next` from 26.3.6 to 26.4.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.6...v26.4.0)

Updates `maplibre-gl` from 6.3.0 to 6.5.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v6.3.0...v6.5.0)

Updates `openai` from 7.4.0 to 7.5.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.4.0...v7.5.0)

Updates `react-i18next` from 17.0.11 to 17.0.12
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.11...v17.0.12)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `uuid` from 14.0.1 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.1...v14.0.2)

Updates `fast-xml-parser` from 5.10.1 to 5.11.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.0)

Updates `@loaders.gl/i3s` from 4.4.4 to 4.4.5
- [Release notes](https://github.com/visgl/loaders.gl/releases)
- [Changelog](https://github.com/visgl/loaders.gl/blob/v4.4.5/CHANGELOG.md)
- [Commits](visgl/loaders.gl@v4.4.4...v4.4.5)

Updates `geotiff-geokeys-to-proj4` from 2026.8.13 to 2026.8.16
- [Release notes](https://github.com/matafokka/geotiff-geokeys-to-proj4/releases)
- [Commits](matafokka/geotiff-geokeys-to-proj4@2026.08.13...2026.08.16)

Updates `@turf/bearing` from 7.3.5 to 7.4.0
- [Release notes](https://github.com/Turfjs/turf/releases)
- [Changelog](https://github.com/Turfjs/turf/blob/master/CHANGELOG.md)
- [Commits](Turfjs/turf@v7.3.5...v7.4.0)

Updates `lucide-react` from 1.31.0 to 1.33.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react)

Updates `wrangler` from 4.123.0 to 4.125.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.125.0/packages/wrangler)

Updates `@cloudflare/workers-types` from 5.20260815.1 to 5.20260822.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@auth0/auth0-react"
  dependency-version: 2.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@carbonplan/zarr-layer"
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@clerk/react"
  dependency-version: 6.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@geoman-io/maplibre-geoman-free"
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@google/genai"
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@strands-agents/sdk"
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: html2canvas-pro
  dependency-version: 2.3.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: i18next
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: maplibre-gl
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: openai
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react-i18next
  dependency-version: 17.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: fast-xml-parser
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@loaders.gl/i3s"
  dependency-version: 4.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: geotiff-geokeys-to-proj4
  dependency-version: 2026.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@turf/bearing"
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: wrangler
  dependency-version: 4.125.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260822.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🔍 Cloudflare PR preview

Item Value
Site https://c0bb6677.geolibre-preview.pages.dev
Demo app https://c0bb6677.geolibre-preview.pages.dev/demo/
Commit 5e6dc55

@github-actions

Copy link
Copy Markdown
Contributor

🔍 GitHub Pages PR preview

Item Value
Site https://opengeos.org/pages-preview/GeoLibre/pr-2100/
Demo app https://opengeos.org/pages-preview/GeoLibre/pr-2100/demo/
Commit 5e6dc55

Note

GitHub Pages built this preview successfully, but its serving edge returned HTTP 403 when checked. The links may still be propagating.

@giswqs
giswqs merged commit fab22f5 into main Aug 25, 2026
19 checks passed
@giswqs
giswqs deleted the dependabot/npm_and_yarn/npm-minor-patch-e18f8ddf2d branch August 25, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant