[dependabot]

Bumps the production-dependencies group with 4 updates in the / directory: chokidar, isomorphic-git, preact and unist-util-visit.

Updates chokidar from 5.0.0 to 6.0.0

Release notes

Sourced from chokidar's releases.

6.0.0

High-level changes

• Rewrote the watcher around a single observation pipeline. Backend callbacks are treated as invalidations and confirmed with lstat, stat, or readdir before any event is emitted, so the final state after a burst of changes matches the filesystem.
• Added native recursive watching through fs.watch({ recursive: true }). The default auto backend uses it on macOS and Windows and per-directory watching elsewhere.
• Shared native handles across watchers and opened them per directory only: files no longer own handles. This fixes EBADF errors when watching many files on macOS (#1385, #1452).
• Replaced fs.watchFile with Chokidar-owned stat polling. Poll loops are shared across watchers at the fastest requested interval.
• Required Node.js 22.22 or later.

API changes

• Added the backend option: 'auto' (default), 'native', 'native-recursive', or 'polling'.
  • usePolling: true remains as a deprecated alias for backend: 'polling'.
• Renamed interval and binaryInterval to pollingInterval and pollingBinaryInterval.
  • The old names remain as deprecated aliases; the new names win when both are given.
• Changed the atomic default to false with polling. An explicit value is preserved.
• Made close() terminal: add() now throws once closing has started. Construct a new watcher instead.
• Validated options in the constructor: invalid backend, atomic, depth, awaitWriteFinish, and polling intervals throw TypeError.
• Emitted errors from add() as error events instead of unhandled rejections (#1378).
• Made getWatched() return a null-prototype object, so a watched directory named __proto__ is listed (#1493). Use Object.hasOwn() instead of hasOwnProperty() on the result.
• Stopped applying ignored to directories above a path passed to watch() or add(), so a missing path is still watched through its parent (#1374). Other entries in those directories are still filtered.

Fixes

• Fixed a 100% CPU loop when the process working directory containing a relatively watched file was deleted (#1474).
• Fixed watching a filesystem root, which emitted unlink and unlinkDir for every entry (#1184, #452).
• Fixed UNKNOWN errors from fs.watch on macOS sockets, which prevented watching /var/run (#1391).
• Fixed a symlink whose target passes through a regular file (ENOTDIR) disabling watching of its directory and preventing ready (#1476).
• Fixed files created in a newly added directory between its scan and watch registration being missed (#1471).
• Fixed watching a missing nested path stopping its parent directory's subtree from being watched (#1470).
• Fixed false change events on Windows when many sibling files are written (#1466).
• Fixed duplicate add events for unchanged files under directory activity (#1465).
• Fixed replacing a watched directory with a file of the same name hanging the process (#1464).
• Fixed persistent watching stopping after a watched directory was removed (#1463).
• Fixed a deleted watched path not being reported when recreated: previously only a deleted file that was the sole watched path was watched for its return. Any path passed to watch() or add() is now awaited from its nearest existing parent.
• Fixed event throttling discarding updates; the newest differing change is now replayed when the window closes (#1455).
• Fixed relative ignored paths; relative strings now resolve against cwd or the process working directory (#1436).
• Fixed files not being detected when their directory did not exist before watching (#1422).
• Fixed removed files being reported as unlinkDir instead of unlink (#1421).
• Fixed ignored files and directories still being watched in WSL (#1418).
• Fixed change being reported for every file when one file changed under Deno (#1417).
• Fixed changes not being detected after the second save (#1399).
• Fixed renaming a watched directory that contains subdirectories on Windows (#1380, #1398).
• Fixed re-watching a path not honoring ignoreInitial (#1386).
• Fixed EISDIR errors during the initial scan of network drives (#1376).
• Fixed watching an array of absolute file paths (#1366).
• Fixed unwatching a deleted watched directory on Windows, contributed by @​sapphi-red in [pull request #1467](paulmillr/chokidar#1467).
• Documented that unwatched paths stay ignored until they are added again (#1439).

Misc

... (truncated)

Changelog

Sourced from chokidar's changelog.

6.0.0 (2026-10-19)

High-level changes

• Rewrote the watcher around a single observation pipeline. Backend callbacks are treated as invalidations and confirmed with lstat, stat, or readdir before any event is emitted, so the final state after a burst of changes matches the filesystem.
• Added native recursive watching through fs.watch({ recursive: true }). The default auto backend uses it on macOS and Windows and per-directory watching elsewhere.
• Shared native handles across watchers and opened them per directory only: files no longer own handles. This fixes EBADF errors when watching many files on macOS (#1385, #1452).
• Replaced fs.watchFile with Chokidar-owned stat polling. Poll loops are shared across watchers at the fastest requested interval.
• Required Node.js 22.22 or later.

API changes

• Added the backend option: 'auto' (default), 'native', 'native-recursive', or 'polling'.
  • usePolling: true remains as a deprecated alias for backend: 'polling'.
• Renamed interval and binaryInterval to pollingInterval and pollingBinaryInterval.
  • The old names remain as deprecated aliases; the new names win when both are given.
• Changed the atomic default to false with polling. An explicit value is preserved.
• Made close() terminal: add() now throws once closing has started. Construct a new watcher instead.
• Validated options in the constructor: invalid backend, atomic, depth, awaitWriteFinish, and polling intervals throw TypeError.
• Emitted errors from add() as error events instead of unhandled rejections (#1378).
• Made getWatched() return a null-prototype object, so a watched directory named __proto__ is listed (#1493). Use Object.hasOwn() instead of hasOwnProperty() on the result.
• Stopped applying ignored to directories above a path passed to watch() or add(), so a missing path is still watched through its parent (#1374). Other entries in those directories are still filtered.

Fixes

• Fixed a 100% CPU loop when the process working directory containing a relatively watched file was deleted (#1474).
• Fixed watching a filesystem root, which emitted unlink and unlinkDir for every entry (#1184, #452).
• Fixed UNKNOWN errors from fs.watch on macOS sockets, which prevented watching /var/run (#1391).
• Fixed a symlink whose target passes through a regular file (ENOTDIR) disabling watching of its directory and preventing ready (#1476).
• Fixed files created in a newly added directory between its scan and watch registration being missed (#1471).
• Fixed watching a missing nested path stopping its parent directory's subtree from being watched (#1470).
• Fixed false change events on Windows when many sibling files are written (#1466).
• Fixed duplicate add events for unchanged files under directory activity (#1465).
• Fixed replacing a watched directory with a file of the same name hanging the process (#1464).
• Fixed persistent watching stopping after a watched directory was removed (#1463).
• Fixed a deleted watched path not being reported when recreated: previously only a deleted file that was the sole watched path was watched for its return. Any path passed to watch() or add() is now awaited from its nearest existing parent.
• Fixed event throttling discarding updates; the newest differing change is now replayed when the window closes (#1455).
• Fixed relative ignored paths; relative strings now resolve against cwd or the process working directory (#1436).
• Fixed files not being detected when their directory did not exist before watching (#1422).
• Fixed removed files being reported as unlinkDir instead of unlink (#1421).
• Fixed ignored files and directories still being watched in WSL (#1418).
• Fixed change being reported for every file when one file changed under Deno (#1417).
• Fixed changes not being detected after the second save (#1399).
• Fixed renaming a watched directory that contains subdirectories on Windows (#1380, #1398).
• Fixed re-watching a path not honoring ignoreInitial (#1386).
• Fixed EISDIR errors during the initial scan of network drives (#1376).
• Fixed watching an array of absolute file paths (#1366).
• Fixed unwatching a deleted watched directory on Windows, contributed by @​sapphi-red in [pull request #1467](paulmillr/chokidar#1467).
• Documented that unwatched paths stay ignored until they are added again (#1439).

... (truncated)

Commits

• 4130839 Release 6.0.0.
• 53f3256 Bump devdeps
• 11ad48f More fixes
• b6812dd Change date
• 706ef2c Merge pull request #1492 from paulmillr/jg/private-public
• d85f4cc chore: expose tested members
• 97e1b93 Add changelog
• 8d5c07d More v6 fixes
• 7af52df Bump ci release.yml
• a0b05d9 Merge pull request #1478 from paulmillr/jg/sponsors
• Additional commits viewable in compare view

Updates isomorphic-git from 1.44.3 to 1.44.4

Release notes

Sourced from isomorphic-git's releases.

v1.44.4

1.44.4 (2026-10-23)

Bug Fixes

• escape and unescape config values like canonical git (#2462) (815284f)

Commits

• 815284f fix: escape and unescape config values like canonical git (#2462)
• See full diff in compare view

Updates preact from 11.0.1 to 11.0.2

Release notes

Sourced from preact's releases.

11.0.2

Fixes

• Keep queued components updating and finish act() cleanup after an uncaught render error (#5265, thanks @​JoviDeCroock)
• Correct the browser ESM entry point for preact/compat/server (#5304, thanks @​rschristian)
• Retain deferred hydration ranges through suspension, resumption, and unmounting (#5315, thanks @​JoviDeCroock)
• Leave non-plain style objects untouched in compat, preserving string-valued signal styles (#5318, thanks @​JoviDeCroock)
• Prevent duplicate DOM after an uncaught render error (#5328, thanks @​brevin-aq and @​JoviDeCroock)

Types

• Improve accessibility discriminated unions for dynamic input and select props (#5311, thanks @​rschristian)
• Make accessible element attribute types the default (#5312, thanks @​rschristian)
• Correct createRef nullability and remove its default any type (#5326, thanks @​rschristian)

Performance

• Reduce core diff bundle size (#5316, thanks @​JoviDeCroock)
• Trim core scheduling and DOM bookkeeping (#5317, thanks @​JoviDeCroock)
• Reduce core bundle size (#5319, thanks @​JoviDeCroock)

Maintenance

• Add a Drydock badge and remove the broken Brotli badge (#5307, thanks @​JoviDeCroock)

Commits

• 7c23627 Merge pull request #5329 from preactjs/release/11.0.2
• b1fffe6 11.0.2
• 1a07083 Merge pull request #5328 from brevin-aq/fix/render-error-duplicate-children
• 8ab86ea fix: keep LIS candidacy separate from old vnode matching
• 82d8c66 fix: don't leave MATCHED on new vnodes when a child throws
• 1dde7a8 fix: correct type of createRef (#5326)
• 74df25e Merge pull request #5319 from preactjs/JoviDeCroock/golf-preact-core
• b8e0ad9 Or isHydrating into the suspended flags
• 1324976 Test newProps !== oldProps first in the cWRP guard
• ba2598a Let setStyle default removed style values
• Additional commits viewable in compare view

Updates unist-util-visit from 5.1.0 to 5.2.0

Release notes

Sourced from unist-util-visit's releases.

5.2.0

Add

• c1ed449 Add support for exit visitors

Performance

• f57c39f Fix performance around indexOf

Full Changelog: syntax-tree/unist-util-visit@5.1.0...5.2.0

Commits

• 2792aa8 5.2.0
• 2509e50 Refactor package.json
• e4e6eab Remove license year
• 0664599 Refactor .editorconfig
• c7ecc36 Update actions
• c6b8b62 Replace internal type utils w/ visit-parents
• c1ed449 Add support for exit visitors
• f57c39f Fix performance around indexOf
• f7b5768 Update dev-dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions