🧹 chore(deps): Bump the npm-dependencies group with 17 updates by dependabot[bot] · Pull Request #593 · P5-wrapper/react

dependabot · 2026-11-01T06:04:32Z

Bumps the npm-dependencies group with 17 updates:

Package	From	To
react-error-boundary	`6.1.5`	`6.1.6`
@babel/core	`8.0.1`	`8.0.9`
@babel/eslint-plugin	`8.0.1`	`8.0.6`
@microsoft/api-extractor	`7.59.0`	`7.60.0`
@types/node	`26.5.0`	`26.6.6`
@typescript-eslint/eslint-plugin	`8.70.0`	`8.72.1`
@vitejs/plugin-react	`6.1.1`	`6.1.2`
eslint	`10.10.0`	`10.13.0`
p5	`2.3.2`	`2.3.4`
prettier	`3.9.6`	`3.9.10`
react	`19.2.8`	`19.3.1`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.1`
@types/react-dom	`19.2.7`	`19.3.0`
typescript-eslint	`8.70.0`	`8.72.1`
vite	`8.2.2`	`8.3.5`
vite-plugin-dts	`5.1.0`	`5.1.2`

Updates react-error-boundary from 6.1.5 to 6.1.6

Release notes

Sourced from react-error-boundary's releases.

6.1.6

Minor bug fixes:

Memoize context values to avoid unnecessary consumer renders when boundary state is unchanged.

Preserve optional defaulted props in withErrorBoundary types.

Accept an explicitly provided undefined fallback but log an error in development.

Commits

1efba11 6.1.5 -> 6.1.6
b8e09ea Bug fixes (#250)
See full diff in compare view

Updates @babel/core from 8.0.1 to 8.0.9

Release notes

Sourced from @babel/core's releases.

v8.0.9 (2026-10-23)

This release contains no changes. It is needed only to update the repo (which is based on @babel/core's last release) in Node.js's CITGM.

v8.0.8 (2026-10-23)

Thanks @bhushan4work and @webdevelopersrinu for your first PRs!

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

#18315 Disallow eval and arguments as class names (@JLHwung)

🐛 Bug Fix

babel-parser

#18392 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@bhushan4work)

#18344 fix(parser): ASI between arrow body and /= regex (@JLHwung)

#18342 fix(parser): allow arguments as a label in class (@JLHwung)

#18365 fix(parser): allow ASI between property init and escaped in (@JLHwung)

#18327 fix(parser): register function id in labeled function declaration (@JLHwung)

#18323 Skip HTML-like comments in the parser's character lookahead (@JLHwung)

#18322 Allow ASI after export default from without exportDefaultFrom (@JLHwung)

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

#18186 Fix _arrayWithHoles bypassing custom Symbol.iterator on array-backed Proxies (@webdevelopersrinu)

babel-plugin-transform-typescript, babel-types

#18380 fix(types): visit decorators of TSParameterProperty (@JLHwung)

babel-plugin-transform-block-scoping

#18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@joellemd)

🏠 Internal

babel-plugin-transform-classes

#18383 Remove internal usage of loose in class transform (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-spread

#18318 Avoid arrayLikeToArray for spreading literals (@nicolo-ribaudo)

Committers: 7

Babel Bot (@babel-bot)

Bhushan Agrawal (@bhushan4work)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joellemd)

Nicolò Ribaudo (@nicolo-ribaudo)

Srinu desetti (@webdevelopersrinu)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/core's changelog.

Changelog

Tags:

💥 [Breaking Change]

👓 [Spec Compliance]

🚀 [New Feature]

🐛 [Bug Fix]

📝 [Documentation]

🏠 [Internal]

💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v8.0.0-alpha.0.

See CHANGELOG - v7.15.0 to v7.28.5 for v7.15.0 to v7.28.5 changes (the last common release between the v8 and v7 release lines was v7.28.5).

See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.

See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.

See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.

See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.

See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.

See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.

See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

Commits

f9c9445 v8.0.9
1fc0073 v8.0.7
d23b2fd fix(core): createConfigItem allows cb as 2nd arg (#18254)
fd66590 chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)
9e408d6 v8.0.6
753bedf Remove unused internal exports (#18235)
e80c9ac build: do not emit sourcemap in production build (#18231)
8b01fec Enforce usage of Yarn catalog for reused dependencies (#18236)
0d8ed70 v8.0.5
4cea20d Use built-in glob in Node.js (#18097)
Additional commits viewable in compare view

Updates @babel/eslint-plugin from 8.0.1 to 8.0.6

Release notes

Sourced from @babel/eslint-plugin's releases.

v8.0.6 (2026-09-18)

Thanks @robhogan for your first PR!

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

#18237 Update identifier definition to Unicode 18 (@JLHwung)

🐛 Bug Fix

babel-parser

#18240 Fix parsing of arrow function params inside ternaries with Flow (@robhogan)

babel-helper-string-parser, babel-parser

#18239 fix: polish error message for invalid binary 0b19 (@JLHwung)

🏠 Internal

babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types

#18235 Remove unused internal exports (@nicolo-ribaudo)

babel-parser

#18245 test: test with ts-eslint 8.70.0 (@JLHwung)

babel-core

#18231 build: do not emit sourcemap in production build (@JLHwung)

babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

#18236 Enforce usage of Yarn catalog for reused dependencies (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-helper-compilation-targets, babel-helper-transform-fixture-test-runner

#18232 Replace lru-cache with flru (@nicolo-ribaudo)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Rob Hogan (@robhogan)

v8.0.5 (2026-09-10)

Thanks @drubetti, @jibin7jose, @joelle-a-dev, @journey-ad, @Kjubikstronk, @MatteoGabriele, and @zhangli091011 for your first PRs!

👓 Spec Compliance

babel-parser

#18218 fix(parser): do not form html entity for invalid codepoint (@JLHwung)

🐛 Bug Fix

babel-parser

#18215 fix(parser): remove non-decimal prefix from bigint (@JLHwung)

#18063 Disallow new import prop access (@JLHwung)

babel-plugin-transform-destructuring

#18214 fix: only collapse the empty-object check when it targets the declared binding (@Kjubikstronk)

babel-plugin-transform-typescript

#18190 fix(ts): improve variable handling in namespace (@JLHwung)

... (truncated)

Changelog

Sourced from @babel/eslint-plugin's changelog.

v8.0.10 (2026-10-29)

🐛 Bug Fix

babel-parser

#18420 fix(parser): improve radix literal rounding (@JLHwung)

#18372 fix(parser): allow parenthesized assignment target in arrow initializer (@JLHwung)

#18410 fix(parser): do not record strict mode errors during lookahead (@JLHwung)

#18433 fix(parser): invalid expectOnePlugin usage (@JLHwung)

#18409 fix(parser): handle ASI after let followed by a reserved word on the next line (@JLHwung)

#18406 fix(parser): parser should not crash for import defer {} (@JLHwung)

#18407 fix(parser): record start location in startNodeAt (@JLHwung)

babel-plugin-transform-block-scoping

#18371 fix: closures in for-loop test and update capture wrong binding (@joellemd)

babel-generator

#18418 fix(generator): keep aliases of string-literal module specifiers (@JLHwung)

#18427 Fix missing parentheses around TypeScript assertion targets (@dagemawinegash)

#18324 fix: invalid minified: true output for new expression (@JLHwung)

#18437 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@saiyam-jain-dev)

#18424 Keep parentheses around TSInstantiationExpression operand (@yulman2207)

#18417 fix(generator): do not disallow line break after import source (@JLHwung)

babel-plugin-transform-optional-chaining, babel-traverse

#18422 fix: Scope#push should not push iife param after rest element (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#18224 fix: avoid removable fields as decorator evaluation hosts (@nyan-left)

babel-types

#18411 Allow member expression values in ObjectPattern properties (@JLHwung)

babel-plugin-transform-classes

#18384 Leave loose class prototype mutable with accessors (@nicolo-ribaudo)

🏠 Internal

babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

#18397 Mangle top level names in helpers (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-traverse

#18413 perf(traverse): improve generateUid and push (@JLHwung)

🔬 Output optimization

babel-helpers, babel-runtime-corejs3

#18325 Shrink jsx helper size (@JLHwung)

v8.0.8 (2026-10-23)

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

... (truncated)

Commits

9e408d6 v8.0.6
8b01fec Enforce usage of Yarn catalog for reused dependencies (#18236)
0d8ed70 v8.0.5
2fff7c4 chore: fix @babel/eslint-plugin peer deps (#18140)
See full diff in compare view

Updates @microsoft/api-extractor from 7.59.0 to 7.60.0

Changelog

Sourced from @microsoft/api-extractor's changelog.

7.60.0

Tue, 27 Oct 2026 00:20:25 GMT

Minor changes

Upgrade the bundled compiler engine to TypeScript 6.0.3

7.59.4

Tue, 06 Oct 2026 00:04:37 GMT

Version update only

7.59.3

Mon, 28 Sep 2026 20:08:26 GMT

Version update only

7.59.2

Tue, 22 Sep 2026 17:35:41 GMT

Patches

Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.

7.59.1

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @microsoft/api-extractor since your current version.

Updates @types/node from 26.5.0 to 26.6.6

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.70.0 to 8.72.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)

typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

eslint-plugin: lazy load rules (#13010)

eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)

typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)

eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)

eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)

eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)

eslint-plugin: [require-array-sort-compare] check tuples (#13058)

eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)

type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)

typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

Evyatar Daud @StyleShit

Junichiro Kasuya @jksy

Mitch Fultz @fitchmultz

Shaan GS @ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)

eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)

eslint-plugin: lazy load rules (#13010)

🩹 Fixes

type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)

eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)

eslint-plugin: [require-array-sort-compare] check tuples (#13058)

eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)

eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)

eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)

typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

Evyatar Daud @StyleShit

Junichiro Kasuya @jksy

Mitch Fultz @fitchmultz

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

... (truncated)

Commits

4ad6b75 chore(release): publish 8.72.1
7757694 chore: cleanup typecheck & build and fix race condition (#13071)
1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
c49d287 chore: [ci] test on oldest supported TS version (#13024)
594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
a4c2603 chore(release): publish 8.72.0
c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
Additional commits viewable in compare view

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

ac47648 release: plugin-react@6.1.2 (#1491)
98277e7 fix(deps): update all non-major dependencies (#1486)
12eddea fix(hmr): better handle compound components (#1484)
3cfb1d1 fix(plugin-react): fix compiler.logDiagnostics (#1483)
6de9915 fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)
ee97d2f fix(deps): update all non-major dependencies (#1445)
b0a014d chore: use Babel 8 for babel compiler playgrounds (#1460)
61b650f fix(deps): update react-related dependencies (#1452)
736efe2 chore(deps): update tsdown to v0.23 (#1451)
See full diff in compare view

Updates eslint from 10.10.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)

a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)

66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)

43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])

95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)

317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)

b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)

47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])

e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)

4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)

bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)

efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)

93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)

02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)

b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)

69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)

686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)

5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)

8816c1d docs: Update README (GitHub Actions Bot)

3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)

b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])

bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)

322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)

d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])

29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])

39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

4637f98 10.13.0
96df05c Build: changelog update for 10.13.0
4783a68 docs: Update README
b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
317fcb3 chore: update ecosystem plugins (#21409)
48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
43f0ac9 docs: clarify parameter description in getText (#21287)
a39d9fb feat: add globalThis to no-obj-calls (#21382)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
Additional commits viewable in compare view

Updates p5 from 2.3.2 to 2.3.4

Release notes

Sourced from p5's releases.

v2.3.4

This patch release includes a couple of bugfixes. Use this version by including:
<script src="https://cdn.jsdelivr.net/npm/p5@2.3.4/lib/p5.js"></script>

<script src="https://cdn.jsdelivr.net/npm/p5@2.3.4/lib/p5.webgpu.js&quot;&gt;&lt;/script>
What's Changed

In processing/p5.js#9202 several contributors @haukun @Vaivaswat2244 and @scs0209 investigated a problem with p5.VERSION. This was the result of a problem during the previous patch release, and the problem is fixed in 2.3.4

In processing/p5.js#9211 @davepagurek fixed a bug that prevented a more helpful FES message when preload() was used.

In processing/p5.js#9215 @limzykenneth enabled CI for the stable branch to improve the new release process.

@Pranava-Pai-N reported and fixed processing/p5.js#9141, with review by @limzykenneth and @perminder-17

@Pcmhacker-piro fixed the missing types declarations issue processing/p5.js#9190 reported by @m4lt3

Work continues (in the main branch) toward 2.4, but this atomic patch makes bugfixes available sooner, following our recent approach to patch releases.

Full Changelog: processing/p5.js@v2.3.3...v2.3.4

v2.3.3

This patch release includes a security hardening measure, a couple of bugfixes, and documentation updates. Use this version by including:
<script src="https://cdn.jsdelivr.net/npm/p5@2.3.3/lib/p5.js"></script>

<script src="https://cdn.jsdelivr.net/npm/p5@2.3.3/lib/p5.webgpu.js&quot;&gt;&lt;/script>
In processing/p5.js#9145 @limzykenneth introduces MAX_GIF_PIXELS, a static property that defines how large, in total pixels, a GIF image is allowed to be loaded into a p5 sketch. The default value is 16,000,000. This means an image's width multiplied by its height must not exceed that value. The property can be set higher if needed. This limitation prevents a GIF with a very large canvas from taking up a lot of browser memory ("decompression bomb"). This patch addresses a security vulnerability report by @slash-init, thanks for reporting! Security vulnerabilities can be reported according to the SECURITY.md policy.

In processing/p5.js#9006 @roymacdonald spotted and patched a typo in quaternion multiplication, adding tests as well. In processing/p5.js#9039 @xdroberto fixed a Friendly Error System (FES) parameter validation bug that @TakagiHitoshi spotted.

Finally, in processing/p5.js#9118 @ksen0 added initial documentation of p5's new Decorators API. This API is mainly aimed at addon authors, but is also used throughout the p5.js library code. In programming, a

Bumps the npm-dependencies group with 17 updates: | Package | From | To | | --- | --- | --- | | [react-error-boundary](https://github.com/bvaughn/react-error-boundary) | `6.1.5` | `6.1.6` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.1` | `8.0.9` | | [@babel/eslint-plugin](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-plugin) | `8.0.1` | `8.0.6` | | [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.59.0` | `7.60.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.6` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.70.0` | `8.72.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` | | [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.13.0` | | [p5](https://github.com/processing/p5.js) | `2.3.2` | `2.3.4` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.72.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.5` | | [vite-plugin-dts](https://github.com/qmhc/unplugin-dts/tree/HEAD/packages/vite-plugin-dts) | `5.1.0` | `5.1.2` | Updates `react-error-boundary` from 6.1.5 to 6.1.6 - [Release notes](https://github.com/bvaughn/react-error-boundary/releases) - [Commits](bvaughn/react-error-boundary@6.1.5...6.1.6) Updates `@babel/core` from 8.0.1 to 8.0.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core) Updates `@babel/eslint-plugin` from 8.0.1 to 8.0.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.6/eslint/babel-eslint-plugin) Updates `@microsoft/api-extractor` from 7.59.0 to 7.60.0 - [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md) - [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor) Updates `@types/node` from 26.5.0 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.70.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin) Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `eslint` from 10.10.0 to 10.13.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.13.0) Updates `p5` from 2.3.2 to 2.3.4 - [Release notes](https://github.com/processing/p5.js/releases) - [Changelog](https://github.com/processing/p5.js/blob/main/contributor_docs/release_process.md) - [Commits](processing/p5.js@v2.3.2...v2.3.4) Updates `prettier` from 3.9.6 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.10) Updates `react` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `typescript-eslint` from 8.70.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) Updates `vite` from 8.2.2 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) Updates `vite-plugin-dts` from 5.1.0 to 5.1.2 - [Release notes](https://github.com/qmhc/unplugin-dts/releases) - [Changelog](https://github.com/qmhc/unplugin-dts/blob/main/packages/vite-plugin-dts/CHANGELOG.md) - [Commits](https://github.com/qmhc/unplugin-dts/commits/vite-plugin-dts@5.1.2/packages/vite-plugin-dts) --- updated-dependencies: - dependency-name: react-error-boundary dependency-version: 6.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/core" dependency-version: 8.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/eslint-plugin" dependency-version: 8.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@microsoft/api-extractor" dependency-version: 7.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: p5 dependency-version: 2.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: vite-plugin-dts dependency-version: 5.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-01T06:05:01Z

Coverage report for commit: 70d1dc2
File: ./coverage/clover.xml

Cover ┌─────────────────────────┐ Freq.
   0% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  10% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  20% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  30% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  40% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  50% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  60% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  70% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  80% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  90% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
 100% │ ███████████████████████ │ 100.0%
      └─────────────────────────┘
 *Legend:* █ = Current Distribution / ▒ = Previous Distribution

Summary - Lines: 100.00% ⏹️ | Methods: 100.00% ⏹️ | Branches: 100.00% ⏹️

Files	Lines	Methods	Branches
src/components
P5Canvas.tsx	100.00%	100.00%	100.00%
P5CanvasGuard.tsx	100.00%	100.00%	100.00%
P5CanvasWithSketch.tsx	100.00%	100.00%	100.00%
src/contracts
P5CanvasProps.ts	100.00%	100.00%	100.00%
src
main.tsx	100.00%	100.00%	100.00%

_{🤖 comment via lucassabreu/comment-coverage-clover}

dependabot Bot added dependencies Pull requests that update a dependency file npm labels Nov 1, 2026

dependabot Bot requested review from jamesrweb and yevdyko as code owners November 1, 2026 06:04

jamesrweb approved these changes Nov 1, 2026

View reviewed changes

jamesrweb merged commit 96219ea into main Nov 1, 2026
7 checks passed

jamesrweb deleted the dependabot/npm_and_yarn/npm-dependencies-6a36eaf77d branch November 1, 2026 09:13

Navigation Menu

Repository navigation

🧹 chore(deps): Bump the npm-dependencies group with 17 updates - #593

🧹 chore(deps): Bump the npm-dependencies group with 17 updates#593
jamesrweb merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-6a36eaf77d

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

github-actions Bot commented Nov 1, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

6.1.6

v8.0.9 (2026-10-23)

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 7

Changelog

v8.0.6 (2026-09-18)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 4

v8.0.5 (2026-09-10)

👓 Spec Compliance

🐛 Bug Fix

v8.0.10 (2026-10-29)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

v8.0.8 (2026-10-23)

👓 Spec Compliance

7.60.0

Minor changes

7.59.4

7.59.3

7.59.2

Patches

7.59.1

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

❤️ Thank You

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.71.2

8.72.1 (2026-10-26)

🩹 Fixes

❤️ Thank You

8.72.0 (2026-10-19)

🚀 Features

🩹 Fixes

❤️ Thank You

8.71.2 (2026-10-12)

🩹 Fixes

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Fix compiler.logDiagnostics option not working (#1483)

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Fix compiler.logDiagnostics option not working (#1483)

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

v10.13.0

Features

Bug Fixes

Documentation

Chores

v10.12.0

Features

Bug Fixes

Documentation

Chores

v2.3.4

What's Changed

v2.3.3

Uh oh!

github-actions Bot commented Nov 1, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Fix `compiler.logDiagnostics` option not working (#1483)

Fix `compiler.logDiagnostics` option not working (#1483)