chore(deps): Bump the npm-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #476 · tojemoc/vmp

dependabot · 2026-08-04T14:38:24Z

Bumps the npm-minor-patch group with 5 updates in the / directory:

Package	From	To
@nx/nuxt	`23.1.0`	`23.1.1`
@nx/vite	`23.1.0`	`23.1.1`
nx	`23.1.0`	`23.1.1`
@moq/net	`0.1.9`	`0.2.2`
@moq/watch	`0.3.2`	`0.4.3`

Updates @nx/nuxt from 23.1.0 to 23.1.1

Release notes

Sourced from @nx/nuxt's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
144918b fix(vitest): generate root vitest.config.ts instead of deprecated vitest.work...
See full diff in compare view

Updates @nx/vite from 23.1.0 to 23.1.1

Release notes

Sourced from @nx/vite's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

7bea843 fix(vite): prevent watch false leaking into dev server config (#36080)
5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
144918b fix(vitest): generate root vitest.config.ts instead of deprecated vitest.work...
See full diff in compare view

Updates nx from 23.1.0 to 23.1.1

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
Additional commits viewable in compare view

Updates @moq/net from 0.1.9 to 0.2.2

Commits

2b8f1b8 Fix CI and add some tests. (#791)
307b859 Fix some h264 parser issues after the merge. (#790)
2ce2cec chore: release (#788)
c7fa332 Add HLS import module (#789)
ca82289 feat: Add raw container format with fixed u64 timestamp encoding (JS) (#784)
0e8dcf2 chore: release (#785)
645af60 Revert the moq_lite changes. (#787)
e94c2d6 Use a better way of getting the CARGO_TARGET_DIR (#786)
73e9986 libmoq consume API (#777)
30c28b8 Bump happy-dom from 13.10.1 to 20.0.11 in /js/hang-ui in the npm_and_yarn gro...
Additional commits viewable in compare view

Updates @moq/watch from 0.3.2 to 0.4.3

Release notes

Sourced from @moq/watch's releases.

libmoq v0.3.14

What's Changed

fix(moq-rtc): handle IPv4-mapped peers on a dual-stack socket by @kixelated in moq-dev/moq#2327

fix(moq-ffi): reject unsupported audio codecs by @kixelated in moq-dev/moq#2331

build(deps): bump the bun group across 1 directory with 14 updates by @dependabot[bot] in moq-dev/moq#2292

chore: release by @moq-bot[bot] in moq-dev/moq#2308

docs: apply the LLM attribution marker to all GitHub prose by @kixelated in moq-dev/moq#2338

fix(moq-native): silence gso_disabled dead-code in default builds by @kixelated in moq-dev/moq#2360

fix(audio): gate worklet construction on the load race, not context.state by @kixelated in moq-dev/moq#2365

fix: skip nix garbage collection during clean by @kixelated in moq-dev/moq#2375

fix(js/net): give the ietf server odd request IDs so v14-16 subscribes don't hang by @kixelated in moq-dev/moq#2376

fix(libmoq): write moq.pc under a profile-scoped path so debug/release don't collide by @kixelated in moq-dev/moq#2379

fix(moq-mux): strip edit lists from the CMAF init by @kixelated in moq-dev/moq#2383

fix(relay): avoid websocket teardown panic by @kixelated in moq-dev/moq#2390

chore(moq-mux): bump mp4-atom to 0.14 by @kixelated in moq-dev/moq#2391

build(deps): bump the cargo group across 1 directory with 3 updates by @dependabot[bot] in moq-dev/moq#2273

fix(json): accept tracks across package instances by @kixelated in moq-dev/moq#2392

fix(relay): route WebSocket auth by request domain by @kixelated in moq-dev/moq#2386

refactor(json): configure producer track in options by @kixelated in moq-dev/moq#2393

chore: release by @moq-bot[bot] in moq-dev/moq#2342

Full Changelog: moq-dev/moq@libmoq-v0.3.13...libmoq-v0.3.14

libmoq v0.3.13

What's Changed

docs: add root-cause and maintainability rules, split PR mechanics into CONTRIBUTING.md by @kixelated in moq-dev/moq#2203

chore(js): bump package versions by @kixelated in moq-dev/moq#2204

chore(py): release moq-rs 0.3.2 with JSON stream wrappers by @kixelated in moq-dev/moq#2214

fix(js/publish): pace capture polyfill via requestVideoFrameCallback by @kixelated in moq-dev/moq#2226

fix(publish): scope video config effect by @kixelated in moq-dev/moq#2228

fix(watch): avoid redundant URL reconnects by @kixelated in moq-dev/moq#2229

build(kt): make just kt check compile + test instead of silently skipping by @kixelated in moq-dev/moq#2227

fix(audio): cancel pending worklet loads by @kixelated in moq-dev/moq#2231

docs: tighten agent guides, invert the non_exhaustive rule by @kixelated in moq-dev/moq#2233

test(smoke): exercise browser playback and audio by @kixelated in moq-dev/moq#2239

feat(moq-ffi): expose client mTLS certificate configuration by @kixelated in moq-dev/moq#2256

fix(moq-hls): release source subscriptions when a Broadcaster is dropped by @kixelated in moq-dev/moq#2254

moq-hls: rewrite export::Broadcaster as an owned poll-driven state machine by @kixelated in moq-dev/moq#2258

fix(srt): prevent egress send buffer stalls by @kixelated in moq-dev/moq#2261

fix(moq-gst): reconnect the moqsink publisher instead of dying on transport death by @kixelated in moq-dev/moq#2240

fix(moq-net): resolve reordered track aliases by @kixelated in moq-dev/moq#2262

fix(moq-hls): account for audio groups in master variants by @kixelated in moq-dev/moq#2264

fix(moq-rtc): synchronize RTP clocks with sender reports by @kixelated in moq-dev/moq#2267

fix(moq-hls): reconcile catalog renditions by @kixelated in moq-dev/moq#2266

feat(moq-mux): cut(end) as the group boundary by @kixelated in moq-dev/moq#2270

fix(moq-hls): honor byte ranges and map changes by @kixelated in moq-dev/moq#2271

chore: release by @moq-bot[bot] in moq-dev/moq#2200

chore: bump non-Rust package versions by @kixelated in moq-dev/moq#2290

fix(moq-native): accept SNI-less raw QUIC connections by @kixelated in moq-dev/moq#2294

... (truncated)

Commits

2d0fe8f chore: release (#2084)
46e6e16 build(deps): bump pako from 2.2.0 to 3.0.0 in the bun group (#2095)
4cd5343 build(deps): bump the cargo group with 9 updates (#2098)
45f8a24 build(deps-dev): bump the uv group with 4 updates (#2096)
ff753d2 build(deps): bump the github-actions group with 2 updates (#2097)
ef43f67 [codex] fix AAC catalog description (#2093)
5d86271 Route subscribes through dynamic origins (#2094)
2d352bd [codex] backport moq-wasm to main (#2086)
07f558f fix: moq-net wasm compatibility (#2085)
eb32626 Fix Codex devshell hook
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the npm-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nx/nuxt](https://github.com/nrwl/nx/tree/HEAD/packages/nuxt) | `23.1.0` | `23.1.1` | | [@nx/vite](https://github.com/nrwl/nx/tree/HEAD/packages/vite) | `23.1.0` | `23.1.1` | | [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `23.1.0` | `23.1.1` | | [@moq/net](https://github.com/moq-dev/moq) | `0.1.9` | `0.2.2` | | [@moq/watch](https://github.com/moq-dev/moq) | `0.3.2` | `0.4.3` | Updates `@nx/nuxt` from 23.1.0 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nuxt) Updates `@nx/vite` from 23.1.0 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/vite) Updates `nx` from 23.1.0 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nx) Updates `@moq/net` from 0.1.9 to 0.2.2 - [Release notes](https://github.com/moq-dev/moq/releases) - [Commits](moq-dev/moq@moq-net-v0.1.9...libmoq-v0.2.2) Updates `@moq/watch` from 0.3.2 to 0.4.3 - [Release notes](https://github.com/moq-dev/moq/releases) - [Commits](moq-dev/moq@libmoq-v0.3.2...kio-v0.4.3) --- updated-dependencies: - dependency-name: "@nx/nuxt" dependency-version: 23.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nx/vite" dependency-version: 23.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: nx dependency-version: 23.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@moq/net" dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@moq/watch" dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 4, 2026

Navigation Menu

Uh oh!

chore(deps): Bump the npm-minor-patch group across 1 directory with 5 updates - #476

chore(deps): Bump the npm-minor-patch group across 1 directory with 5 updates#476
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-9dd6e91257

dependabot Bot commented on behalf of github Aug 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

libmoq v0.3.14

What's Changed

libmoq v0.3.13

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants