Skip to content

build(deps): bump the npm-production group across 1 directory with 13 updates - #19

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-26f0a1117a
Open

build(deps): bump the npm-production group across 1 directory with 13 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-26f0a1117a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 13 updates in the / directory:

Package From To
@ant-design/icons 5.6.1 6.3.4
@ts-evtx/core 1.2.0 1.3.0
@virustotal/yara-x 1.15.0 1.21.0
@vitejs/plugin-react 5.2.0 6.1.2
antd 5.29.3 6.6.6
pdfjs-dist 6.3.289 6.4.299
postal-mime 2.7.5 4.0.5
react 19.2.7 19.3.0
react-dom 19.2.7 19.3.0
sql-formatter 15.8.2 15.9.0
sql.js 1.14.1 1.14.2
vite 6.4.3 8.3.4
yaml 2.9.0 2.9.1

Updates @ant-design/icons from 5.6.1 to 6.3.4

Commits

Updates @ts-evtx/core from 1.2.0 to 1.3.0

Commits

Updates @virustotal/yara-x from 1.15.0 to 1.21.0

Release notes

Sourced from @​virustotal/yara-x's releases.

v1.21.0

  • Add Scanner.set_module_output to Python bindings (#744).
  • Add debug command for showing atoms (#748).
  • Allow reading scan lists from stdin (#753).
  • Performance improvements (#747, #750, #755, #756, #758, #775, #781, #782)
  • Add support for more ELF machine types in elf module (23a75aa).
  • BUGFIX: make yara-x-py's module features actually work (#766).
  • BUGFIX: allow passing pathlib.Path to add_include_dir in the Python API (b846b3b).
  • BUGFIX: reduce memory usage in parser (#761).
  • BUGFIX: exclude non-matching files in NDJSON output (61a2dc2).
  • BUGFIX: false positives/negatives when a rule containing a file header constraint shared a pattern with some other rule (#771, #784).

Contributors: @​CfirTsabari, @​matt-acsc, @​king-tero

v1.20.0

  • Implement SIMD-accelerated masked literal matching (#691).
  • Improve atom extraction heuristics for better performance (#690, 1e14f60).
  • Improve scan performance by applying file size and file header constraints only to regular expressions (#741).
  • Serialize Aho-Corasick automata directly with compiled rules for faster deserialization (3c61ef8).
  • Add --ignore-invalid-rules CLI option to skip rules that fail to compile (#704).
  • Expose ignore_invalid_rules in Python API (#711).
  • Add type annotations to match and return data in Python API (#692).
  • Add yrx_scanner_max_matches_per_pattern to C API and Scanner.MaxMatchedPerPattern to Go API (a33fa8e).
  • Add rlib crate types to yara-x-capi and yara-x-py to allow linking into wrapper crates (3c411d8).
  • Implement experimental msi, vba, and olecf modules (#709, 35e16ef).
  • Parse ShellItems and malformed sections in lnk module (#722).
  • Raise warning when patterns are unintendedly included in a set (#729).
  • Improve code completion in language server by distinguishing enums from other fields (a59e311).
  • Improve playground usability and add light/dark theme support (#701, #707, #731, 15f4984).
  • BUGFIX: Prevent panics and provide clear error message for regular expressions exceeding size limits (89df3f7).
  • BUGFIX: Prevent panic when filesize is compared to float values (328dcb3).
  • BUGFIX: Allow Teddy pattern matching algorithm to propagate early termination and respect timeouts (9d62d72).
  • BUGFIX: Correctly anchor patterns in of expressions with explicit offsets (439d642).
  • BUGFIX: Properly report compile error when exceeding maximum local variables limit (af53582).
  • BUGFIX: Escape special control characters in JSON and YAML serialization (#696).
  • BUGFIX: Do not ignore private modifier on hex and regular expression patterns (#698).
  • BUGFIX: Cap ZIP buffer pre-allocation to compressed size (#702).
  • BUGFIX: Robustly encode 64-bit string handles for WASM (#710).
  • BUGFIX: Align completions with default formatting in language server (#713).
  • BUGFIX: Fix accuracy issues when computing profiling time spent on each rule (6364574).
  • BUGFIX: Prevent naming conflicts in Python bindings by setting module name explicitly to yara_x (95fc833, 54435ac).
  • BUGFIX: Add protection against null pointers in C API (bf95890).

Contributors: @​1ndahous3 @​kevinmuoz @​malvidin @​MichaelTheSynthCat @​paul-atx @​saguywalker @​tlansec @​wxsBSD @​zdiff

v1.19.0

  • Add missing machine architecture types to pe module (#687).
  • Add warning for single-byte patterns (71baa67).

... (truncated)

Commits
  • 7b2637d chore: bump version to 1.21.0.
  • 1b428d8 chore: upgrade dependencies.
  • 8e8bc78 tests: fix test case.
  • f093332 chore: bump serialization format version.
  • df102df perf(scanner): adjust memory-map file size threshold
  • ffc4793 fix: restore limit controlling when to show warning message due to too many m...
  • 2367413 style: run cargo fmt.
  • 1dbdb15 refactor: associate fast-scan match limits directly with patterns
  • 72979f0 perf: improve logic for anchoring pattern. (#782)
  • a41d91a perf(scanner): stop tracking pattern matches in fast-scan mode once constant ...
  • Additional commits viewable in compare view

Updates @vitejs/plugin-react from 5.2.0 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

... (truncated)

Commits

Updates antd from 5.29.3 to 6.6.6

Release notes

Sourced from antd's releases.

6.6.6

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts
  • Table
    • 🐞 修复 Table 树形数据使用「全选所有」时漏选子孙行的问题。#59342 @​QDyanbing
    • 🐞 修复 Table 开启 preserveSelectedRowKeys 时 rowSelection 的 onSelect 对已保留 key 返回 undefined 的问题。#59449 @​Chaoqi31
    • 🐞 修复 Table column.filterDropdownProps.popupRender 不生效的问题。#59393 @​ramen2020
    • 🐞 修复 Table 仅在 ConfigProvider 中配置 scroll 时，翻页或筛选后不会滚动到首行的问题。#59394 @​ramen2020
    • 🐞 修复 Table 在 v6 逻辑方向属性迁移后，固定列场景下选择列 z-index 不生效的问题。#58609 @​leshalv
  • Transfer
    • 🐞 修复 Transfer 的 selectAllLabels 设置为数值 0 时回退为默认数量文案的问题。#59487 @​QDyanbing
    • 🐞 修复单向 Transfer 移除条目后，受控选中状态仍保持勾选的问题。#59428 @​yunfeizhu
    • 🐞 修复 Transfer 使用 Shift 连选时选中搜索隐藏项，以及搜索结果变化后连选范围错误的问题。#59348 @​QDyanbing
  • Tree
    • 🐞 修复 Tree.DirectoryTree 使用数字 key 和 defaultExpandAll 时 Shift 范围选择失效的问题。#59375 @​QDyanbing
    • 🐞 修复 Tree.DirectoryTree 按住 Shift 连选时会选中 selectable: false 或 disabled: true 节点的问题。#59341 @​QDyanbing

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.6

2026-10-12

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts

6.6.5

2026-09-20

... (truncated)

Commits
  • c1a538b docs: changelog for 6.6.6 (#59539)
  • f755d90 fix(Table): include tree descendants when selecting all data (#59342)
  • df35daf fix(Avatar): preserve responsive size at larger breakpoints (#59446)
  • 255cb18 docs: correct Cascader tagRender signature and doc typos (#59523)
  • d069448 docs: fix Descriptions column type and description (#59533)
  • 9a5f4e1 fix(locale): improve ro_RO translations (#59528)
  • 5bc7ff7 chore(deps): update actions/setup-node digest to 949feb2 (#59530)
  • 2b939f4 chore(deps): update actions/download-artifact digest to 9000827 (#59529)
  • e1b172d chore(deps): update dependency @​types/adm-zip to ^0.6.0 (#59531)
  • 4db00b4 chore(deps): update dependency node-notifier to v11 (#59532)
  • Additional commits viewable in compare view

Updates pdfjs-dist from 6.3.289 to 6.4.299

Release notes

Sourced from pdfjs-dist's releases.

v6.4.299

This release contains improvements for annotation rendering, font conversion, form handling, pattern rendering, performance, text selection and the viewer.

Changes since v6.3.289

... (truncated)

Commits
  • d0991a0 Merge pull request #22064 from Snuffleupagus/_requestChunks-avoid-pointless-r...
  • d7e7101 Merge pull request #22062 from timvandermeij/updates
  • bcf8943 Avoid creating a pointless requestId in the `ChunkedStreamManager.prototype...
  • d03359c Merge pull request #22061 from Snuffleupagus/SupportedImageMimeTypes-Set
  • 76f6eb6 Fix vulnerability in the fast-uri dependency
  • e987c74 Upgrade eslint-plugin-unicorn to version 77.0.0
  • bf5f6ea Upgrade eslint-plugin-jsdoc to version 65.0.2
  • 7dc3cf0 Update dependencies to the most recent versions
  • e9d1c85 Merge pull request #22041 from calixteman/sampled-fn-arity
  • c67fe15 Check shading function dimensions and bound sampled interpolation
  • Additional commits viewable in compare view

Updates postal-mime from 2.7.5 to 4.0.5

Release notes

Sourced from postal-mime's releases.

v4.0.5

4.0.5 (2026-10-07)

Bug Fixes

  • bound the number of MIME parts with a maxPartCount option (87eaedd)
  • convert html with many unclosed link tags to text in linear time (c8e5792)
  • decode uppercase hex, NUL and C1 numeric character references like a browser (ee12306)
  • delete the trailing white space of quoted-printable lines (0639c5e)
  • end the headers at a whitespace-only line when no header can follow it (0639c5e)
  • fold line breaks out of decoded encoded words and RFC 2231 filenames (1f25e26)
  • hand attachment bytes through as sent and read legacy mail the lax way (0639c5e)
  • keep an escaped parenthesis inside an RFC 5322 comment (a2a07ce)
  • keep the line endings of 7bit, 8bit and binary parts and normalize text to LF (0639c5e)
  • read a multipart without a boundary parameter as plain text (0639c5e)
  • read text without a usable charset as UTF-8 or windows-1252 and honor an html meta charset (0639c5e)
  • unfold format=flowed quoted paragraphs as RFC 3676 reads them (0639c5e)

v4.0.4

4.0.4 (2026-10-03)

Bug Fixes

  • stop decoding the CRLF before a multipart boundary as part content (004eec7), closes #102

v4.0.3

4.0.3 (2026-10-03)

Bug Fixes

  • keep a continuation from overriding the plain parameter of the same name (6fa92ad)
  • stop the junk behind a closed quoted string from hiding the whole body (535fcf8)

v4.0.2

4.0.2 (2026-09-30)

Bug Fixes

  • stop a "[" from hiding the operators after it (2797ee5)

v4.0.1

4.0.1 (2026-09-30)

Bug Fixes

... (truncated)

Changelog

Sourced from postal-mime's changelog.

4.0.5 (2026-10-07)

Bug Fixes

  • bound the number of MIME parts with a maxPartCount option (87eaedd)
  • convert html with many unclosed link tags to text in linear time (c8e5792)
  • decode uppercase hex, NUL and C1 numeric character references like a browser (ee12306)
  • delete the trailing white space of quoted-printable lines (0639c5e)
  • end the headers at a whitespace-only line when no header can follow it (0639c5e)
  • fold line breaks out of decoded encoded words and RFC 2231 filenames (1f25e26)
  • hand attachment bytes through as sent and read legacy mail the lax way (0639c5e)
  • keep ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 11, 2026
@dependabot dependabot Bot changed the title build(deps): bump the npm-production group with 13 updates build(deps): bump the npm-production group across 1 directory with 13 updates Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-26f0a1117a branch from bd300c8 to 9035c55 Compare October 16, 2026 07:22
@dependabot
build(deps): bump the npm-production group across 1 directory with 13…
3704c4c 
… updates

Bumps the npm-production group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ant-design/icons](https://github.com/ant-design/ant-design-icons) | `5.6.1` | `6.3.4` |
| [@ts-evtx/core](https://github.com/NickSmet/ts-evtx) | `1.2.0` | `1.3.0` |
| [@virustotal/yara-x](https://github.com/VirusTotal/yara-x) | `1.15.0` | `1.21.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.2.0` | `6.1.2` |
| [antd](https://github.com/ant-design/ant-design) | `5.29.3` | `6.6.6` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.3.289` | `6.4.299` |
| [postal-mime](https://github.com/postalsys/postal-mime) | `2.7.5` | `4.0.5` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [sql-formatter](https://github.com/sql-formatter-org/sql-formatter) | `15.8.2` | `15.9.0` |
| [sql.js](https://github.com/sql-js/sql.js) | `1.14.1` | `1.14.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.3.4` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@ant-design/icons` from 5.6.1 to 6.3.4
- [Commits](https://github.com/ant-design/ant-design-icons/commits)

Updates `@ts-evtx/core` from 1.2.0 to 1.3.0
- [Commits](https://github.com/NickSmet/ts-evtx/commits)

Updates `@virustotal/yara-x` from 1.15.0 to 1.21.0
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.15.0...v1.21.0)

Updates `@vitejs/plugin-react` from 5.2.0 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `antd` from 5.29.3 to 6.6.6
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@5.29.3...6.6.6)

Updates `pdfjs-dist` from 6.3.289 to 6.4.299
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v6.3.289...v6.4.299)

Updates `postal-mime` from 2.7.5 to 4.0.5
- [Release notes](https://github.com/postalsys/postal-mime/releases)
- [Changelog](https://github.com/postalsys/postal-mime/blob/master/CHANGELOG.md)
- [Commits](postalsys/postal-mime@v2.7.5...v4.0.5)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `sql-formatter` from 15.8.2 to 15.9.0
- [Release notes](https://github.com/sql-formatter-org/sql-formatter/releases)
- [Commits](sql-formatter-org/sql-formatter@v15.8.2...v15.9.0)

Updates `sql.js` from 1.14.1 to 1.14.2
- [Release notes](https://github.com/sql-js/sql.js/releases)
- [Commits](sql-js/sql.js@v1.14.1...v1.14.2)

Updates `vite` from 6.4.3 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@ant-design/icons"
  dependency-version: 6.3.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: "@ts-evtx/core"
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@virustotal/yara-x"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: antd
  dependency-version: 6.6.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: pdfjs-dist
  dependency-version: 6.4.299
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: postal-mime
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: sql-formatter
  dependency-version: 15.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: sql.js
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-26f0a1117a branch from 9035c55 to 3704c4c Compare October 17, 2026 04:02

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants