Bump the dev-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the dev-dependencies group with 7 updates in the / directory:

Package	From	To
@changesets/cli	2.31.0	2.31.1
@types/node	26.1.0	26.1.1
tsx	4.23.0	4.23.1
vite	8.1.3	8.1.4
autoprefixer	10.5.2	10.5.3
postcss	8.5.16	8.5.19
netlify-cli	26.1.0	26.2.0

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

• #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

• a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
• e8650b9 Version Packages (#2161)
• 15cf592 Fixed handling of the npm 12 info output (#2159)
• 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
• 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
• 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
• 8f6acd6 Update dependabot group to exclude major (#2067)
• c70c675 Setup backport workflow and sync next setup (#2057)
• 9672019 Remove SECURITY.md to defer to .github (#2055)
• 18e1661 Use internal bot for versioning (#2039)
• Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 79fddde fix(watch): treat script and dependency paths literally
• e818ad6 perf: index transform cache lazily
• cdcc623 perf: map Node TypeScript formats directly
• d067938 perf: load esbuild lazily in CLI
• 95d0672 fix(watch): avoid clearing piped output
• 6fd4607 docs: add per-page metadata
• f4176d8 docs: generate sitemap
• 8d4ffc2 fix: support tsImport after global preload
• f0e89b2 docs: document Node's public type-stripping API vs internal loader path
• f8992f1 perf: use sync module hooks on Node v22.22.3+
• See full diff in compare view

Updates vite from 8.1.3 to 8.1.4

Release notes

Sourced from vite's releases.

v8.1.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

• avoid warnings (#22851) (af21ab6)

Build System

• remove the custom onLog function (#22878) (2c4a217)
• replace deprecated onwarn with onLog (#22741) (c581b55)

Commits

• a477454 release: v8.1.4
• ab5dafa feat(legacy): prefer oxc as minifier (fix #21973) (#22468)
• 173a1b6 fix(ssr): align named export function call stacktrace column with Node (#22829)
• 575c32c fix(build): add workaround for building on stackblitz (#22840)
• 72a5e21 fix(optimizer): avoid optimizer run for transform request before init (#22852)
• a9539d6 chore(deps): update dependency postcss-modules to v9 (#22867)
• 70435b2 docs: fix incorrect @default for server.cors (#22859)
• 2c4a217 build: remove the custom onLog function (#22878)
• c581b55 build: replace deprecated onwarn with onLog (#22741)
• ea22fb3 refactor: eliminate ineffectiveDynamicImport warn (#22876)
• Additional commits viewable in compare view

Updates autoprefixer from 10.5.2 to 10.5.3

Release notes

Sourced from autoprefixer's releases.

10.5.3

• Fixed brackets and gradient parser (@​alanturing881).

Changelog

Sourced from autoprefixer's changelog.

10.5.3

• Fixed brackets and gradient parser (@​alanturing881).

Commits

• 958d390 Release 10.5.3 version
• 21d2adb Fix gradient parser
• f7ddae9 Fix bracket parser
• 10ea5e7 Update dependencies and remove patch
• b6e8a2a Update Dev Container
• c2f8725 Clean up CI
• 2db2ccf Move to public Dev Container
• See full diff in compare view

Updates postcss from 8.5.16 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

Changelog

Sourced from postcss's changelog.

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

Commits

• 9543b22 Release 8.5.19 version
• 3d13bf9 Fix CI on Windows too
• 00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
• 7a05b33 Temporary fix CI
• 4c0d194 Release 8.5.18 version
• 92b4e78 Update dependencies
• 95663d3 Limit where source map can be loaded for security reasons
• 74e25ae Release 8.5.17 version
• d1518af Fix Maximum call stack size exceeded error
• 2421312 Fix linter
• Additional commits viewable in compare view

Updates netlify-cli from 26.1.0 to 26.2.0

Release notes

Sourced from netlify-cli's releases.

v26.2.0

26.2.0 (2026-07-06)

Features

• add watch-ignore flag (#8271) (fc30bcc)

Bug Fixes

• add a stacktrace for monitoring (#8301) (30ba6a1)
• add commandname to error reporting (#8303) (004df96)
• deps: replace lodash with native utilities (#8189) (137fbf0)
• deps: update dependency @​netlify/blobs to ^10.7.9 (#8291) (419a749)
• deps: update dependency @​netlify/dev to ^4.18.7 (#8292) (1985b3b)
• deps: update dependency @​netlify/dev-utils to ^4.4.6 (#8293) (392af83)
• deps: update dependency @​netlify/edge-functions to ^3.0.8 (#8295) (7d00215)
• deps: update dependency @​netlify/functions to ^5.3.0 (#8296) (42393a4)
• deps: update dependency @​netlify/images to ^1.3.10 (#8298) (20fb23d)
• dev: execute dev command with shell operators (&&, ||, etc.) (#8234) (d07599e)
• silence zip output when creating source zips (#8323) (e6fbebc)

Changelog

Sourced from netlify-cli's changelog.

26.2.0 (2026-07-06)

Features

• add watch-ignore flag (#8271) (fc30bcc)

Bug Fixes

• add a stacktrace for monitoring (#8301) (30ba6a1)
• add commandname to error reporting (#8303) (004df96)
• deps: replace lodash with native utilities (#8189) (137fbf0)
• deps: update dependency @​netlify/blobs to ^10.7.9 (#8291) (419a749)
• deps: update dependency @​netlify/dev to ^4.18.7 (#8292) (1985b3b)
• deps: update dependency @​netlify/dev-utils to ^4.4.6 (#8293) (392af83)
• deps: update dependency @​netlify/edge-functions to ^3.0.8 (#8295) (7d00215)
• deps: update dependency @​netlify/functions to ^5.3.0 (#8296) (42393a4)
• deps: update dependency @​netlify/images to ^1.3.10 (#8298) (20fb23d)
• dev: execute dev command with shell operators (&&, ||, etc.) (#8234) (d07599e)
• silence zip output when creating source zips (#8323) (e6fbebc)

Commits

• 7c10162 chore(main): release 26.2.0 (#8290)
• 3c41e72 test: fix edge functions watch-ignore path assertions on Windows (#8327)
• e6fbebc fix: silence zip output when creating source zips (#8323)
• 137fbf0 fix(deps): replace lodash with native utilities (#8189)
• d0fb528 chore(deps): update dependency @​fastify/static to v9.1.3 (#8319)
• 4e919e2 chore(deps): update dependency http-proxy-middleware to v3.0.7 [security] (#8...
• 5585c33 chore(deps): update actions/create-github-app-token action to v2.2.2 (#8302)
• 004df96 fix: add commandname to error reporting (#8303)
• 77982eb chore(deps): update dependency form-data to v4.0.6 [security] (#8308)
• 35d52f5 chore(deps): combined dependency bumps (#8297, #8242, #8299) (#8304)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6a7ffa7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.