Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the prod-deps group with 8 updates in the / directory:

Package From To
@babel/runtime 7.26.0 7.28.4
@monogrid/gainmap-js 3.0.6 3.1.0
camera-controls 3.1.0 3.1.1
detect-gpu 5.0.56 5.0.70
hls.js 1.5.17 1.6.13
three-stdlib 2.35.6 2.36.0
use-sync-external-store 1.4.0 1.6.0
zustand 5.0.1 5.0.8

Updates @babel/runtime from 7.26.0 to 7.28.4

Release notes

Sourced from @​babel/runtime's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

📝 Documentation

🏠 Internal

🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

Committers: 5

... (truncated)

Changelog

Sourced from @​babel/runtime's changelog.

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

📝 Documentation

🏠 Internal

🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

v7.28.2 (2025-07-24)

🐛 Bug Fix

  • babel-types
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

v7.28.1 (2025-07-12)

🐛 Bug Fix

  • babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

📝 Documentation

... (truncated)

Commits

Updates @monogrid/gainmap-js from 3.0.6 to 3.1.0

Release notes

Sourced from @​monogrid/gainmap-js's releases.

v3.1.0

3.1.0 (2024-12-05)

Features

  • decode: removes DOMParser, decode is now compatible with Web Workers (b6a607d)
Changelog

Sourced from @​monogrid/gainmap-js's changelog.

3.1.0 (2024-12-05)

Features

  • decode: removes DOMParser, decode is now compatible with Web Workers (b6a607d)
Commits
  • 1d99788 chore(release): 3.1.0 [skip ci]
  • b6a607d feat(decode): removes DOMParser, decode is now compatible with Web Workers
  • 93bf1c2 Merge pull request #59 from Arecsu/main
  • 1a94472 remove DOMParser(), decode compatible with Web Workers
  • 7604871 Merge pull request #57 from MONOGRID/dependabot/npm_and_yarn/three-0.170.0
  • 509ca63 Merge branch 'main' into dependabot/npm_and_yarn/three-0.170.0
  • c73fd7a Merge pull request #53 from MONOGRID/dependabot/github_actions/dot-github/wor...
  • 5ceb83d chore: bump actions/upload-artifacts to v4
  • ad9fe9c Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actio...
  • ff09f3f chore(examples): update examples
  • Additional commits viewable in compare view

Updates camera-controls from 3.1.0 to 3.1.1

Release notes

Sourced from camera-controls's releases.

v3.1.1

3.1.1 (2025-10-26)

fix

  • recreate pr-562 change (#606) (), closes #606

  • . ()

  • Merge pull request #595 from abernier/abernier-pkg (), closes #595

  • Revert "Merge pull request #595 from abernier/abernier-pkg" (), closes #595

chore

  • change main branch name ()
  • update deps (#587) (), closes #587
  • update github actions ()
  • update migration guide ()
Commits

Updates detect-gpu from 5.0.56 to 5.0.70

Commits

Updates hls.js from 1.5.17 to 1.6.13

Release notes

Sourced from hls.js's releases.

v1.6.13

Summary

HLS.js v1.6.13 includes bug fixes and improvements over the last release.

The initPTS fix addresses an edge-case introduced in v1.6.6 with #7311, where hls.js began using MSE timestampOffset in place or remapping media timestamps.

The content protection related fixes address issues resulting from an expectation for a KEYID attribute or a key ID value in the EXT-X-KEY tag or its URI.

Changes Since The Last Release

video-dev/hls.js@v1.6.12...v1.6.13

  • Fix seeking back in live with timestamp wrapping (#7537) @​robwalch
    • Fixes "fragParsingError" after seeking back in live - regression introduced in 1.6.6 with #7311 (#7536) @​bmarshall
  • Use Widevine KEYID or parse PlayReady when level keys are present (#7545)
    • Fixes FairPlay parsing error - regression introduced in 1.6.11 (#7542) @​Jason239
  • Get KEYID from init segment 'tenc' when not found elsewhere (#7547)

Demo Page

Get demo url from https://github.com/video-dev/hls.js/tree/deployments

API and Breaking Changes

If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.

Feedback

Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

v1.6.12

Summary

HLS.js v1.6.12 includes bug fixes and improvements over the last release.

Changes Since The Last Release

video-dev/hls.js@v1.6.11...v1.6.12

  • Fixed PlayReady regression introduced v1.6.11:
  • Use (incomplete) Widevine PSSH parsing when KEYID attribute missing from playlist KEY tags (#7415) @​yajin2021
  • Multivariant Playlist parsing fixes (#7523) @​robwalch
    • Add missing stats.parsing.end timing to manifest events
    • Use playlist CODECS in mime-type when handling unknown codecs (fixes handling of AIV example content)
  • Setup as audio-only when main segment has no video and CODECS is missing (#7530)
  • Fix live reload failure after empty playlist response (“no EXTM3U delimiter” error) (#7533)

Demo Page

https://37434c54.hls-js-dev.pages.dev/demo/

API and Breaking Changes

If you are upgrading from version v0.14.17 or lower, see the MIGRATING guide for API changes between v0.14.x and v1.0.0.

... (truncated)

Commits
  • abb6945 Get KEYID from init segment 'tenc' when not found elsewhere
  • b282f03 Roll initPTS forward when needed by earlier segments
  • 6f91d50 Use Widevine KEYID or parse Playready when level keys are present
  • 785c0a5 Update npm to v11 before publish
  • e49270c Use GitHub release env for npm publish (#7544)
  • c4d9bf3 Fix "Missing format identifier #EXTM3U" playlist parsing errors
  • 0919731 Merge pull request #7530 from video-dev/bugfix/audio-only-main
  • 0638d9a Setup as audio-only when main segment has no video
  • a3c63bd Multivariant Playlist parsing fixes (#7523)
  • 5a62280 Error handling for PlayReady key with no status change (#7527)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for hls.js since your current version.


Updates three-stdlib from 2.35.6 to 2.36.0

Release notes

Sourced from three-stdlib's releases.

v2.36.0

2.36.0 (2025-04-29)

Features

  • PointerLockControls: sensitivity const (#416) (e6653ce)

v2.35.16

2.35.16 (2025-04-23)

Bug Fixes

  • remove use of WebGL1 LuminanceFormat (#419) (e079bc8)

v2.35.15

2.35.15 (2025-04-05)

Bug Fixes

v2.35.14

2.35.14 (2025-02-20)

Bug Fixes

  • Fix alignment of integer vertex attributes (#408) (c122b5c)

v2.35.13

2.35.13 (2025-01-29)

Bug Fixes

v2.35.12

2.35.12 (2025-01-19)

Bug Fixes

v2.35.11

2.35.11 (2025-01-19)

... (truncated)

Commits

Updates use-sync-external-store from 1.4.0 to 1.6.0

Commits

Updates zustand from 5.0.1 to 5.0.8

Release notes

Sourced from zustand's releases.

v5.0.8

A bug fix in shallow and a tiny improvement in persist.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.7...v5.0.8

v5.0.7

This enables a small optimization in some edge cases.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.6...v5.0.7

v5.0.6

Some very minor changes.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.5...v5.0.6

v5.0.5

It comes with some small improvements.

What's Changed

New Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.0` | `7.28.4` |
| [@monogrid/gainmap-js](https://github.com/MONOGRID/gainmap-js) | `3.0.6` | `3.1.0` |
| [camera-controls](https://github.com/yomotsu/camera-controls) | `3.1.0` | `3.1.1` |
| [detect-gpu](https://github.com/pmndrs/detect-gpu) | `5.0.56` | `5.0.70` |
| [hls.js](https://github.com/video-dev/hls.js) | `1.5.17` | `1.6.13` |
| [three-stdlib](https://github.com/pmndrs/three-stdlib) | `2.35.6` | `2.36.0` |
| [use-sync-external-store](https://github.com/facebook/react/tree/HEAD/packages/use-sync-external-store) | `1.4.0` | `1.6.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.1` | `5.0.8` |



Updates `@babel/runtime` from 7.26.0 to 7.28.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.4/packages/babel-runtime)

Updates `@monogrid/gainmap-js` from 3.0.6 to 3.1.0
- [Release notes](https://github.com/MONOGRID/gainmap-js/releases)
- [Changelog](https://github.com/MONOGRID/gainmap-js/blob/main/CHANGELOG.md)
- [Commits](MONOGRID/gainmap-js@v3.0.6...v3.1.0)

Updates `camera-controls` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/yomotsu/camera-controls/releases)
- [Changelog](https://github.com/yomotsu/camera-controls/blob/dev/.releaserc.yml)
- [Commits](yomotsu/camera-controls@v3.1.0...v3.1.1)

Updates `detect-gpu` from 5.0.56 to 5.0.70
- [Changelog](https://github.com/pmndrs/detect-gpu/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pmndrs/detect-gpu/commits)

Updates `hls.js` from 1.5.17 to 1.6.13
- [Release notes](https://github.com/video-dev/hls.js/releases)
- [Changelog](https://github.com/video-dev/hls.js/blob/master/docs/release-process.md)
- [Commits](video-dev/hls.js@v1.5.17...v1.6.13)

Updates `three-stdlib` from 2.35.6 to 2.36.0
- [Release notes](https://github.com/pmndrs/three-stdlib/releases)
- [Changelog](https://github.com/pmndrs/three-stdlib/blob/main/release.config.js)
- [Commits](pmndrs/three-stdlib@v2.35.6...v2.36.0)

Updates `use-sync-external-store` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/use-sync-external-store)

Updates `zustand` from 5.0.1 to 5.0.8
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.1...v5.0.8)

---
updated-dependencies:
- dependency-name: "@babel/runtime"
  dependency-version: 7.28.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@monogrid/gainmap-js"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: camera-controls
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: detect-gpu
  dependency-version: 5.0.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: hls.js
  dependency-version: 1.6.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: three-stdlib
  dependency-version: 2.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: use-sync-external-store
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: zustand
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2025
@vercel
Copy link

vercel bot commented Oct 27, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
drei Ready Ready Preview Comment Oct 27, 2025 8:04pm

@codesandbox-ci
Copy link

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant