Skip to content

chore(deps): bump driver.js from 1.8.0 to 1.9.0 in /ui - #886

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/driver.js-1.9.0
Closed

chore(deps): bump driver.js from 1.8.0 to 1.9.0 in /ui#886
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/driver.js-1.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps driver.js from 1.8.0 to 1.9.0.

Release notes

Sourced from driver.js's releases.

1.9.0

Added

  • closeBtnLabel (driver and step level) to set the close button's aria-label, for translated tours. Defaults to Close. (#623)
  • overlayClickBehavior: "none" to ignore overlay clicks while Escape and the close button still close the tour. (#435)

Changed

  • Keyboard control follows the popover buttons: arrow keys do nothing when their button is hidden or disabled, and Escape does nothing when the close button is disabled. (#589)
  • The current popover is hidden while waitForElement waits for the next step's element, so a stale step no longer stays on screen. (#578)
  • Only one instance is on screen at a time. Starting a tour or highlight closes any other active instance; it gets onDeselected and onDestroyed but not onDestroyStarted.

Fixed

  • destroy() on an instance that is not active is now a no-op instead of tearing down another instance's tour. (#504)
  • The highlighted element's own aria-controls, aria-expanded and aria-haspopup are restored when the highlight moves on or the tour ends, instead of being removed. (#495)
  • No more small white square between steps without an element. (#549)
  • onDeselected now fires when moving between two steps on the same element, or between two steps without an element.
  • The driver-level disableButtons now applies to tour steps. It used to be ignored during a tour. A step's own disableButtons still replaces it.
Commits
  • cc39804 1.9.0
  • d7ccdd0 Apply global disableButtons to tour steps
  • bda4190 Hide the popover while waiting for an element
  • 758a563 Add none option to overlayClickBehavior
  • addb8f5 Make keyboard control follow the buttons
  • 15cd79e Fire onDeselected when the step changes
  • d19768a Remove stage gap on steps without an element
  • 2a30339 Restore aria attributes after a highlight
  • 4dff1b9 Make close button label configurable
  • ed09b81 Close the active instance when another starts
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@socket-security

socket-security Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​driver.js@​1.8.0 ⏵ 1.9.0100 +110093 +183 -8100

View full report

@dependabot
chore(deps): bump driver.js from 1.8.0 to 1.9.0 in /ui
48798a7 
Bumps [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/nilbuild/driver.js/releases)
- [Commits](https://github.com/nilbuild/driver.js/commits/1.9.0/packages/driver)

---
updated-dependencies:
- dependency-name: driver.js
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ui/driver.js-1.9.0 branch from 583ec35 to 48798a7 Compare October 14, 2026 17:17
@rainmanjam rainmanjam mentioned this pull request Oct 14, 2026
Merged
rainmanjam added a commit that referenced this pull request Oct 14, 2026
@rainmanjam @dependabot
chore(deps): batch the October Dependabot updates (#895)
5f81470 
* chore(deps): bump SonarSource/sonarqube-scan-action from 8.2.2 to 8.3.0

Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 8.2.2 to 8.3.0.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@ba9859e...d209202)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump ubuntu from `da6fc2b` to `f144425`

Bumps ubuntu from `da6fc2b` to `f144425`.

---
updated-dependencies:
- dependency-name: ubuntu
  dependency-version: '26.04'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump the go-minor-and-patch group across 1 directory with 9 updates

Bumps the go-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/bluenviron/gortmplib](https://github.com/bluenviron/gortmplib) | `1.0.3` | `1.0.4` |
| [github.com/datarhei/gosrt](https://github.com/datarhei/gosrt) | `0.11.0` | `0.12.0` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.8` | `4.26.9` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.60.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.49.0` | `0.51.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.59.0` | `1.60.1` |



Updates `github.com/bluenviron/gortmplib` from 1.0.3 to 1.0.4
- [Commits](bluenviron/gortmplib@v1.0.3...v1.0.4)

Updates `github.com/datarhei/gosrt` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/datarhei/gosrt/releases)
- [Commits](datarhei/gosrt@v0.11.0...v0.12.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.8 to 4.26.9
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.8...v4.26.9)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/net` from 0.59.0 to 0.60.0
- [Commits](golang/net@v0.59.0...v0.60.0)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/tools` from 0.49.0 to 0.51.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.49.0...v0.51.0)

Updates `modernc.org/sqlite` from 1.59.0 to 1.60.1
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.59.0...v1.60.1)

---
updated-dependencies:
- dependency-name: github.com/bluenviron/gortmplib
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/datarhei/gosrt
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/tools
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: modernc.org/sqlite
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): batch the October npm bumps for ui and web

Applies #893, #891, #889, #887, #886 and #885 in one change (one lockfile
regeneration per package instead of six rebases):
- ui: @playwright/test 1.64, @types/node 24.19.2, @vitejs/plugin-react 6.1.2,
  @vitest/coverage-v8 5.0.3, jsdom 30.1.2, oxlint 1.87, vite 8.3.4,
  lucide-react 1.55, driver.js 1.9.0 (exact, as before), radix group (15).
- web: @vitest/coverage-v8 5.0.3, jsdom 30.1.2, wrangler 4.149.0 and
  @astrojs/markdown-satteri 0.4.3 (both exact, as before).

wrangler 4.149's miniflare now depends on undici 7.29.1 and sharp 0.35.5
itself, which is the removal condition recorded for both version-keyed
overrides, so they are removed; resolved versions are unchanged.

ui: tsc -b, lint, vitest 1113/1113, build. web: astro check, build.
osv-scanner 0 for both lockfiles.

Claude-Session: https://claude.ai/code/session_01A8N3W5ct9SZtHK9sCDD9cL

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@rainmanjam

rainmanjam commented Oct 14, 2026

Copy link
Copy Markdown
Owner

Included in #895 (batched October Dependabot updates), now merged.

@rainmanjam rainmanjam closed this Oct 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ui/driver.js-1.9.0 branch October 14, 2026 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rainmanjam