build(deps): bump the production group across 1 directory with 7 updates by dependabot[bot] · Pull Request #364 · open-mapsight/mapsight

dependabot · 2026-10-14T19:53:49Z

Bumps the production group with 7 updates in the / directory:

Package	From	To
@tanstack/react-query	`5.104.0`	`5.104.1`
sharp	`0.35.4`	`0.35.5`
postcss	`8.5.28`	`8.5.29`
ol	`10.10.0`	`10.11.0`
@types/node	`24.19.0`	`24.19.1`
jsdom	`30.1.1`	`30.1.2`
vitest	`5.0.1`	`5.0.3`

Updates @tanstack/react-query from 5.104.0 to 5.104.1

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.104.1

Patch Changes

Updated dependencies [ec060b6]:

@tanstack/query-devtools@5.104.1

@tanstack/react-query@5.104.1

@tanstack/react-query-next-experimental@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.1

@tanstack/react-query-persist-client@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.104.1

@tanstack/react-query@5.104.1

@tanstack/react-query@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

Commits

29859ae ci: Version Packages (#11806)
339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
0a57279 test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...
c51bb62 chore(*): declare '@eslint-react/eslint-plugin' in the react packages and exa...
a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
d99c84b chore(*): update '@eslint-react/eslint-plugin' to v5 and apply its 'recommend...
fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
Additional commits viewable in compare view

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

Add upper bounds check on length of linear and GIF delay arrays.

Improve error handing when WebAssembly fallback also fails. #4593 @lazerg

TypeScript: Allow multi-frame options for JXL output. #4602 @ramin-010

TypeScript: Remove non-existent named export. #4604

Increase accepted dimensions when extending an image. #4605

Improve gain map support for extract and rotate operations. #4606

Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

Add upper bounds check on length of linear and GIF delay arrays.

Improve error handing when WebAssembly fallback also fails. #4593 @lazerg

TypeScript: Allow multi-frame options for JXL output. #4602 @ramin-010

TypeScript: Remove non-existent named export. #4604

Increase accepted dimensions when extending an image. #4605

Improve gain map support for extract operation. #4606

... (truncated)

Commits

51a990f Release v0.35.5
96de105 Upgrade to sharp-libvips v1.3.4
3a61390 CI: Configure Dependabot with all package.json locations
4940c50 Improve gain map support for rotate/flip/flop ops
20654aa Prerelease v0.35.5-rc.1
ef4f934 CI: Upgrade to Ubuntu 26.04
358df95 Upgrade to libvips v8.18.7
49f4903 Improve gain map support for rotate-then-extract #4606
0e2e55e Silence a couple of compiler/static analysis warnings
cef3b8c Improve gain map support for extract operation #4606
Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.29

Release notes

Sourced from postcss's releases.

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Commits

a7a1f34 Release 8.5.29 version
b55a36d Update dependencies
7647a81 Escape </style> in output of non-Root nodes (#2163)
7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
ebffa97 Add postcss-smooth-corners plugin
57d6401 Speed up source map cleaning
7e46a03 Speed up parser
7f5c417 Improve </style> protection for the case when beffore nodes have different parts
7ba9051 Fix useless ESLint warning
12b4161 Update dependencies
Additional commits viewable in compare view

Updates ol from 10.10.0 to 10.11.0

Release notes

Sourced from ol's releases.

v10.11.0

10.11.0

The 10.11 release improves styling, raster data and OGC service support, and makes the library leaner to load. The highlights are

Canvas styles now evaluate the color and array operators, and interpolate mixes colors in sRGB on both the Canvas and WebGL renderers; a new interpolate-hcl operator keeps the perceptual gradient

ol/source/Raster gains basic data tile support, and the GeoZarr source can visualize generic n-D datacubes and accepts storeOptions for headers and credentials

WMTS sources no longer derive their extent from the tile matrices, so layers that cover a wider area at low zoom levels are no longer cut off

Tiles that the current view no longer needs are dropped from the queue, and the WebGL text overlay worker is loaded on demand

The VectorImageLayer gets crisp rendering on rotated views, with rotated text and point symbols

New wrapX option for getPixelFromCoordinate and getCoordinateFromPixel, and projection options for the WKT format

Fixes for RTL text along lines, nested WFS 2.0 feature collections, empty GeoJSON coordinate arrays, and MouseWheelZoom target cleanup

Upgrade notes

Fixed GeoJSON parsing of geometries with empty coordinate arrays

Previously, a GeoJSON geometry with an empty coordinates array (e.g. {"type": "Point", "coordinates": []}) produced a geometry with an empty coordinates array. We have now changed this to match the GeoJSON spec's recommendation to treat such geometries (except GeometryCollection) as null geometries. This change should not affect application code, unless it had special handling for geometries with empty coordinates arrays.

Fixed: interpolate mixed colors differently on the Canvas and WebGL renderers

The ['interpolate', ...] operator interpolated colors in the Hue-Chroma-Luminance space on the Canvas renderer, but component-wise in sRGB on the WebGL renderer. The same style produced different gradients depending on which renderer drew it, and neither behaviour was documented. Both now interpolate in sRGB.

Gradients built with interpolate over colors will look slightly different on the Canvas renderer. To keep the previous appearance, use the new interpolate-hcl operator:
// Before
const style = {
  'fill-color': ['interpolate', ['linear'], ['get', 'value'], 0, 'red', 1, 'green'],
};
// After - to keep the perceptual gradient
const style = {
  'fill-color': ['interpolate-hcl', ['linear'], ['get', 'value'], 0, 'red', 1, 'green'],
};
interpolate-hcl is only supported by the Canvas renderer for now.

With the ['interpolate', ...] operator, channels now keep their fractional part, so operations applied on top of an interpolated color are more accurate. Code reading back a color from an evaluated style may now see a fractional channel.

The WMTS tile grid extent is no longer calculated from the tile matrices

... (truncated)

Commits

88fc445 Updates for the 10.11.0 release
66e841c Merge pull request #17606 from ahocevar/cog-examples-source
fc449f3 Merge pull request #17646 from zarathustracode/wkt-projection-options
90cbd4a Merge pull request #17653 from openlayers/dependabot/npm_and_yarn/development...
9f1b626 Merge pull request #17655 from openlayers/dependabot/npm_and_yarn/production-...
0c9e542 Merge pull request #17656 from openlayers/dependabot/github_actions/actions-7...
c188334 Merge pull request #17650 from Egge-Jan/custom-controls-north-arrow
7d43f53 chore(deps): bump the actions group across 1 directory with 2 updates
5a9ab43 chore(deps-dev): bump the development-security group across 1 directory with ...
27dfb99 chore(deps): bump earcut
Additional commits viewable in compare view

Updates @types/node from 24.19.0 to 24.19.1

Commits

See full diff in compare view

Updates jsdom from 30.1.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

Updated URLs to support Unicode v18.0.0 in internationalized domain names.

Reduced package size and memory use for CSS property definitions. (@scttcper)

Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@cmdcolin)

Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@scttcper)

Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.

Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.

Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@asamuzaK)

Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@asamuzaK)

Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.

Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().

Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@scttcper)

Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.

Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.

Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@asamuzaK)

Commits

a23bfb7 30.1.2
64a75d2 Update dependencies and dev dependencies
7bf9653 Invalidate styles after CSSOM and control state changes
fe9009c Update focused area handling
a8d28b3 Release windows retained by stylesheet parsing
05a2c01 Deduplicate generated CSS property metadata
1efa190 Reduce generated CSS property data
a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
b2cd235 Update css-color
0542d2b Release idle MutationObserver bookkeeping
Additional commits viewable in compare view

Updates vitest from 5.0.1 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

... (truncated)

Commits

33cadea chore: release v5.0.3 (#11409)
346d389 fix(vm): don't reuse scripts across vite environments (#11395)
f6c9a49 fix(deps): pin why-is-node-running to 3.2.1 to avoid users running into `...
062c75d chore: fix standalone docs build, update exports maps (#11394)
caf2887 fix(vm): do not optimize deps from index.html (fix #11329) (#11360)
50312eb fix(pool): preserve unique pool ids when groupOrder is set (#11392)
7c36748 fix(browser): ignore page crash while cancelling (#11386)
92ba7fc fix: scope cache key generators to projects (fix #11281) (#11301)
38f9885 fix(cache): revalidate imports of cached modules (#11381)
b24585f fix: don't retry when test.fails expectedly failed (#11219)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.0` | `5.104.1` | | [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.29` | | [ol](https://github.com/openlayers/openlayers) | `10.10.0` | `10.11.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.0` | `24.19.1` | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.1` | `30.1.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.3` | Updates `@tanstack/react-query` from 5.104.0 to 5.104.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query) Updates `sharp` from 0.35.4 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.4...v0.35.5) Updates `postcss` from 8.5.28 to 8.5.29 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.29) Updates `ol` from 10.10.0 to 10.11.0 - [Release notes](https://github.com/openlayers/openlayers/releases) - [Commits](openlayers/openlayers@v10.10.0...v10.11.0) Updates `@types/node` from 24.19.0 to 24.19.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jsdom` from 30.1.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.1...v30.1.2) Updates `vitest` from 5.0.1 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.104.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: postcss dependency-version: 8.5.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: ol dependency-version: 10.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 24.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-10-14T19:53:59Z

🦋 Changeset detected

Latest commit: 0cd8d72

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 10 packages

Name	Type
@mapsight/core	Patch
@mapsight/ui	Patch
@mapsight/count-aggregator-ui	Patch
mapsight-host-starter	Patch
mapsight-next-starter	Patch
@mapsight/showcase	Patch
@mapsight/traffic-style	Patch
@mapsight/vector-style-compiler	Patch
mapsight-vite-spa-starter	Patch
@mapsight/lib-ol	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml # starters/mapsight-next-starter/package.json

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml

dependabot Bot added the deps:npm label Oct 14, 2026

github-actions Bot and others added 8 commits October 14, 2026 19:54

chore: add changeset for dependabot update

b01c826

fix(lib-ol): support nullable OpenLayers map targets

3c9a69a

build(deps): refresh production lockfile against main

dd0c551

fix: handle optional OpenLayers viewports and targets

ed56450

Merge remote-tracking branch 'origin/main' into maintenance/productio…

dd6ec8c

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml

Merge remote-tracking branch 'origin/main' into maintenance/productio…

07533c6

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml

Merge remote-tracking branch 'origin/main' into maintenance/productio…

5872ecb

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml # starters/mapsight-next-starter/package.json

Merge remote-tracking branch 'origin/main' into maintenance/productio…

0cd8d72

…n-recovery-20261016 # Conflicts: # pnpm-lock.yaml

pjeweb merged commit d35cc9f into main Oct 16, 2026
21 checks passed

pjeweb deleted the dependabot/npm_and_yarn/production-4fc53c5f69 branch October 16, 2026 14:40

pjeweb mentioned this pull request Oct 16, 2026

Version Packages #318

Merged

Navigation Menu

Repository navigation

build(deps): bump the production group across 1 directory with 7 updates - #364

build(deps): bump the production group across 1 directory with 7 updates#364
pjeweb merged 9 commits into
mainfrom
dependabot/npm_and_yarn/production-4fc53c5f69

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

changeset-bot Bot commented Oct 14, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

@​tanstack/react-query@​5.104.1

Patch Changes

5.104.1

Patch Changes

v0.35.5

v0.35.5-rc.1

8.5.29

8.5.29

v10.11.0

10.11.0

Upgrade notes

Fixed GeoJSON parsing of geometries with empty coordinate arrays

Fixed: interpolate mixed colors differently on the Canvas and WebGL renderers

The WMTS tile grid extent is no longer calculated from the tile matrices

v30.1.2

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

Uh oh!

changeset-bot Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@tanstack/react-query-devtools@5`.104.1

`@tanstack/react-query-next-experimental@5`.104.1

`@tanstack/react-query-persist-client@5`.104.1

`@tanstack/react-query@5`.104.1

Fixed: `interpolate` mixed colors differently on the Canvas and WebGL renderers

changeset-bot Bot commented Oct 14, 2026 •

edited

Loading