Skip to content

chore(deps): bump the production-dependencies group with 2 updates - #317

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b0f6b33c9e
Open

chore(deps): bump the production-dependencies group with 2 updates#317
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b0f6b33c9e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates: firebase and monaco-editor.

Updates firebase from 12.1.0 to 12.18.0

Release notes

Sourced from firebase's releases.

firebase@12.18.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.15.0

Minor Changes

Patch Changes

  • 589b24b #10293 - Updated many top-level devDependencies.

  • 7fc34cb #10248 - Fixed incorrect detection of LanguageModel that prevented usage of on-device models in Chrome Extensions.

  • Updated dependencies [589b24b]:

    • @​firebase/app-check-interop-types@​0.3.5
    • @​firebase/component@​0.7.5
    • @​firebase/logger@​0.5.2
    • @​firebase/util@​1.15.3

firebase@12.18.0

Minor Changes

Patch Changes

... (truncated)

Commits
  • 6cde0c0 Version Packages (#10316)
  • ade2b70 Merge main into release
  • 589b24b chore(deps): mass dependency update round 3 (#10293)
  • d80fb9a feat(app-check): Update debug token console log message (#10262)
  • ae9adcb Remove pashanka from auth owners (#10304)
  • 317dcd9 docs(firestore): fix api extractor tsdoc syntax and release tag warnings (#10...
  • 31b3f14 chore(firestore): clean up unused external imports and configure rollup exter...
  • f063aad chore: add agents.md (#10302)
  • 44d336b fix(auth): remove visibilitychange listener from IndexedDBLocalPersistence (#...
  • 19693de chore(deps): remove some deps and replace with native solutions (#10294)
  • Additional commits viewable in compare view

Updates monaco-editor from 0.52.2 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.

[0.55.1]

  • Fixes missing language exports (monaco.json/typescript/...) due to wrong "types" path - #5123

[0.55.0]

Breaking Changes

  • Moves nested namespaces (languages.css, languages.html, languages.json, languages.typescript) to top level namespaces (css, html, json, typescript) to simplify the build process and align with typescript recommendations.

New Features

  • Adds native LSP support (see new lsp namespace).

Bug Fixes

  • Updates dompurify to 3.2.7

[0.54.0]

  • Adds option editor.mouseMiddleClickAction
  • Various bug fixes

[0.53.0]

  • ⚠️ This release deprecates the AMD build and ships with significant changes of the AMD build. The AMD build will still be shipped for a while, but we don't offer support for it anymore. Please migrate to the ESM build.

... (truncated)

Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [firebase](https://github.com/firebase/firebase-js-sdk) and [monaco-editor](https://github.com/microsoft/monaco-editor).


Updates `firebase` from 12.1.0 to 12.18.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.1.0...firebase@12.18.0)

Updates `monaco-editor` from 0.52.2 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.52.2...v0.56.0)

---
updated-dependencies:
- dependency-name: firebase
  dependency-version: 12.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: monaco-editor
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 3, 2026
@dependabot
dependabot Bot requested a review from 0xTheProDev as a code owner September 3, 2026 12:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants