Skip to content

chore(deps): bump the npm-dependencies group with 5 updates - #237

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-60e3ce9ad0
Open

chore(deps): bump the npm-dependencies group with 5 updates#237
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-60e3ce9ad0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 5 updates:

Package From To
@types/node 24.13.3 24.13.4
docmd-search 0.1.3 0.1.5
lucide-static 1.43.0 1.46.0
markdown-it 14.3.1 14.3.2
docmd-assistant 0.1.17 0.1.18

Updates @types/node from 24.13.3 to 24.13.4

Commits

Updates docmd-search from 0.1.3 to 0.1.5

Release notes

Sourced from docmd-search's releases.

docmd-search@0.1.5 🚀 (Upstream Dependency Refresh)

This release refreshes all core upstream toolchains and runtime dependencies to their latest stable releases.

Updates & Upgrades

  • onnxruntime-node (^1.29.0): Updated runtime engine for enhanced cross-platform prebuild compatibility.
  • protobufjs (^8.8.0): Major update with modern type definitions and serialization stability.
  • adm-zip (>=0.6.1): Updated zip extraction routines with latest security fixes.
  • esbuild (^0.28.2) & typescript (^7.0.2): Upgraded compiler and bundler pipeline.
  • @​types/node (^26.5.1): Latest Node.js type declarations.

Full Changelog: docmd-io/docmd-search@0.1.4...0.1.5

docmd-search@0.1.4 🛡️ (Security & Dependency Locks)

This release updates core dependencies to patch known vulnerabilities and ensures modern cross-platform prebuild compatibility.

Security & Dependency Improvements

  • sharp (^0.35.4): Remediates high-severity vulnerabilities in bundled libheif (GHSA-rgj7-g3m4-5g8c).
  • adm-zip (>=0.6.0): Resolves directory traversal and arbitrary file overwrite vulnerability (GHSA-955c-w567-g4pw).
  • protobufjs (^7.6.5): Fixes prototype pollution vulnerability (CVE-2023-36665).
  • onnxruntime-node (^1.27.0): Provides native prebuilds for Node 20/22+ on Apple Silicon (darwin-arm64) and modern Linux distributions.
  • Explicit Dependency Overrides: Direct root overrides prevent consumers from pulling obsolete or vulnerable binary builds.

Full Changelog: docmd-io/docmd-search@0.1.3...0.1.4

Commits
  • 72d9942 chore(deps): update dependencies to latest and bump version to 0.1.5
  • 21ebf91 Update package-lock.json
  • 8ecca73 chore(release): bump docmd-search to 0.1.4 with security overrides and depend...
  • See full diff in compare view

Updates lucide-static from 1.43.0 to 1.46.0

Release notes

Sourced from lucide-static's releases.

Version 1.46.0

What's Changed

Full Changelog: lucide-icons/lucide@1.45.0...1.46.0

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

... (truncated)

Commits
  • 7eb8afe feat(icons): added monitor-pc icon (#4791)
  • 08b2fd2 chore(deps-dev): bump astro from 7.3.0 to 7.3.2 in the astro-deps group (#4860)
  • a79b2d1 feat(icons): Added new icons: clef-g, clef-f and clef-c (#4083)
  • b998e28 feat(icons): added globe-code icon (#3722)
  • 5da3ee3 ci(ci.yml): Add dispatch post release (#4847)
  • 6bbe5dd chore(deps-dev): bump vitest in /integrations/lucide-react/vite (#4844)
  • 4a26fa5 chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 (#4845)
  • 5d592a9 fix(packages/vue): fix generated icon declaration types for @​lucide/vue (#4841)
  • bdf795a feat(lab): add hand-gear icon (#2327)
  • e4be16a feat(docs): added "How to use Lucide icons" section to resources (#4829)
  • Additional commits viewable in compare view

Updates markdown-it from 14.3.1 to 14.3.2

Changelog

Sourced from markdown-it's changelog.

[14.3.2] - 2026-09-12

Security

  • Backported 15.0.2 fixes.
Commits

Updates docmd-assistant from 0.1.17 to 0.1.18

Release notes

Sourced from docmd-assistant's releases.

docmd-assistant@0.1.18

This release expands the multi-turn reasoning budget to 6 turns, introduces a real-time streaming replacement protocol (meta.replace: true) for live tokens, and adds architectural context synthesis fallbacks.

Key Features & Enhancements

Multi-Turn Reasoning Budget Expansion

  • Extended Turn Ceiling: Increased maximum turns to 6, allowing tool-assisted investigations (e.g. searching structure, inspecting navigation, reading target pages) to complete without premature tool shutoff.
  • Guaranteed Final Synthesis: Tools remain active across intermediate turns and are selectively disabled only on the final turn to guarantee clean synthesis.

Real-Time Streaming Replacement Protocol

  • Unblocked SSE Token Streaming: Tokens stream immediately without intermediate suppression, emitting { replace: true } markers when transitioning across reasoning turns.
  • In-Place Live UI Editing: Downstream chat clients can smoothly overwrite intermediate thought chunks with synthesized responses in real time.

Architectural Context Synthesis Fallback

  • Multi-Tier Context Synthesizer: When tool searches yield no dedicated documentation page, the engine automatically synthesises answers by referencing overarching project architecture and layout conventions.

Full Changelog: docmd-io/docmd-assistant@0.1.17...0.1.18

Commits
  • 854b299 feat(engine): expand multi-turn budget to 6, add streaming edit protocol and ...
  • 0a1a110 refactor: preserve original code fences without forced conversion, maintain v...
  • 97019dd test: update sanitizer test comments for universal 4-backtick fences
  • 418ba72 refactor: simplify code block fencing as universal 4-backtick built-in withou...
  • 0590312 feat: enclose code blocks in four-backtick fences to retain nested blocks (#222)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-dependencies group with 5 updates
9f28a6b 
Bumps the npm-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.13.4` |
| [docmd-search](https://github.com/docmd-io/docmd-search) | `0.1.3` | `0.1.5` |
| [lucide-static](https://github.com/lucide-icons/lucide) | `1.43.0` | `1.46.0` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.3.1` | `14.3.2` |
| [docmd-assistant](https://github.com/docmd-io/docmd-assistant) | `0.1.17` | `0.1.18` |


Updates `@types/node` from 24.13.3 to 24.13.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `docmd-search` from 0.1.3 to 0.1.5
- [Release notes](https://github.com/docmd-io/docmd-search/releases)
- [Commits](docmd-io/docmd-search@0.1.3...0.1.5)

Updates `lucide-static` from 1.43.0 to 1.46.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](lucide-icons/lucide@1.43.0...1.46.0)

Updates `markdown-it` from 14.3.1 to 14.3.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.2/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.3.1...14.3.2)

Updates `docmd-assistant` from 0.1.17 to 0.1.18
- [Release notes](https://github.com/docmd-io/docmd-assistant/releases)
- [Commits](docmd-io/docmd-assistant@0.1.17...0.1.18)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: docmd-search
  dependency-version: 0.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lucide-static
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: markdown-it
  dependency-version: 14.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: docmd-assistant
  dependency-version: 0.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file Javascript Pull requests that update javascript code labels Sep 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file Javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants