Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 2 updates - #300

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/packages/frontend/dev/minor-and-patch-7b84efc14d
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/packages/frontend/dev/minor-and-patch-7b84efc14d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 2 updates in the /packages/frontend directory: @rolldown/plugin-babel and mfm-js.

Updates @rolldown/plugin-babel from 0.2.4 to 0.3.0

Release notes

Sourced from @​rolldown/plugin-babel's releases.

plugin-babel@0.3.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​rolldown/plugin-babel's changelog.

0.3.0 (2026-10-29)

Features

Bug Fixes

Miscellaneous Chores

Tests

  • exclude benchmarks from package Vitest projects (#153) (9d071ad)
Commits
  • b6d3a17 release: plugin-babel@0.3.0
  • 62b6144 feat(babel): add parallel option to transform in worker threads (#139)
  • 9d071ad test: exclude benchmarks from package Vitest projects (#153)
  • 277a919 chore(deps): update rolldown-related dependencies (#150)
  • bcd3e00 chore(deps): update all non-major dependencies (#149)
  • a4444dc chore(deps): update all non-major dependencies (#145)
  • a0e8ff7 chore(deps): update all non-major dependencies (#142)
  • 2fe2645 chore(deps): update all non-major dependencies (#140)
  • d427660 chore(deps): update all non-major dependencies (#137)
  • b8560ba fix(deps): update all non-major dependencies (#133)
  • See full diff in compare view

Updates mfm-js from 0.26.0 to 0.28.0

Release notes

Sourced from mfm-js's releases.

0.28.0

Improvements

  • Improve memory usage

Changes

  • We have added new restrictions during the parsing process to enhance security. While it is extremely rare, this may result in some highly complex MFM patterns failing to render.
    We have tested several common examples of "MFM art" under these new constraints and confirmed that they can still be parsed successfully.

Bugfixes

  • Update dependencies
  • Security fixes

0.27.0

Bugfixes

  • Restore CLI commands that are accidentally removed in 0.26.0
  • Security fixes
  • Update dependencies
Changelog

Sourced from mfm-js's changelog.

0.28.0

Improvements

  • Improve memory usage

Changes

  • We have added new restrictions during the parsing process to enhance security. While it is extremely rare, this may result in some highly complex MFM patterns failing to render.
    We have tested several common examples of "MFM art" under these new constraints and confirmed that they can still be parsed successfully.

Bugfixes

  • Update dependencies
  • Security fixes

0.27.0

Bugfixes

  • Restore CLI commands that are accidentally removed in 0.26.0
  • Security fixes
  • Update dependencies
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mfm-js since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 2 updates in the /packages/frontend directory: [@rolldown/plugin-babel](https://github.com/rolldown/plugins/tree/HEAD/packages/babel) and [mfm-js](https://github.com/misskey-dev/mfm.js).


Updates `@rolldown/plugin-babel` from 0.2.4 to 0.3.0
- [Release notes](https://github.com/rolldown/plugins/releases)
- [Changelog](https://github.com/rolldown/plugins/blob/main/packages/babel/CHANGELOG.md)
- [Commits](https://github.com/rolldown/plugins/commits/plugin-babel@0.3.0/packages/babel)

Updates `mfm-js` from 0.26.0 to 0.28.0
- [Release notes](https://github.com/misskey-dev/mfm.js/releases)
- [Changelog](https://github.com/misskey-dev/mfm.js/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/misskey-dev/mfm.js/commits/v0.28.0)

---
updated-dependencies:
- dependency-name: "@rolldown/plugin-babel"
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mfm-js
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the frontend label Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Love-Rox/rox
  • Branch: dev
  • File: .coderabbit.yaml
  • Commit: 4a2e620
  • Layers: Repository YAML
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4af37a6c-e29c-479d-b532-49027eaeee41

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants