deps: bump the minor-and-patch group across 2 directories with 3 updates by dependabot[bot] · Pull Request #449 · SecureAuthCorp/ciam-quickstart-samples

dependabot · 2026-10-01T20:30:41Z

Bumps the minor-and-patch group with 3 updates in the /samples/react/login-pkce directory: prettier, vite and vitest.
Bumps the minor-and-patch group with 3 updates in the /samples/react/token-refresh directory: prettier, vite and vitest.

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

View changes on GitHub

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

View changes on GitHub

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 3 updates in the /samples/react/login-pkce directory: [prettier](https://github.com/prettier/prettier), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the minor-and-patch group with 3 updates in the /samples/react/token-refresh directory: [prettier](https://github.com/prettier/prettier), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

dependabot Bot requested a review from ksroda-sa as a code owner October 1, 2026 20:30

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

svcdevopsgit2-sa approved these changes Oct 1, 2026

View reviewed changes

svcdevopsgit2-sa enabled auto-merge (squash) October 1, 2026 20:30

Navigation Menu

deps: bump the minor-and-patch group across 2 directories with 3 updates - #449

deps: bump the minor-and-patch group across 2 directories with 3 updates#449
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/react/login-pkce/minor-and-patch-c49545681e

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v8.3.1

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.3.1 (2026-09-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

v5.0.2

🐞 Bug Fixes

View changes on GitHub

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v8.3.1

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.3.1 (2026-09-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

v5.0.2

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)