Bump the npm-dependencies group with 2 updates by dependabot[bot] · Pull Request #147 · lunarcloud/lunarcloud.github.io

dependabot · 2026-06-25T08:53:18Z

Bumps the npm-dependencies group with 2 updates: aframe and npm-check-updates.

Updates aframe from 1.7.1 to 1.8.0

Release notes

v1.8.0

1.8.0 (June 23, 2026)

Major Changes

Bug fixes and improvements.

Update THREE to r184

Bug fixes

Fix issue when a loaded cube texture doesn't contribute to light probes (fix #5734) (#5735) (@mrxz)

Fix issue when url of gltf-model changes when model is still loading (#5739) (@mrxz)

Address unsafe-eval error with with strict Content Security Policy (CSP) (fix #5028) (#5821) (@vincentfretin, @samiemad, @mrxz)

Replace Clock instance by Timer instance. Clock is deprecated in THREE r183+ (#5800) (@vincentfretin)

Remove pcfsoft shadow type in shadow component, deprecated in THREE r182+ fallback to pcf (#5798) (@vincentfretin, @mrxz)

Set dialogs text color explictitly to ovverride browser defaults that might result on white text on white background (#5814) (@vincentfretin)

Fix issue when a tracked controller disconnects and reconnects (#5804) (@vincentfretin)

Fix hand-controls orientation on Meta Quest Controllers (fix #5570, #5305, #5321) (#5766) (@filandra)

Fix missing pixel row when capturing an image with the screenshot component (fix #5789) (#5790) (@diarmidmackenzie)

Fix issue with loading screen dismissed prematurely while images are still loading (#5779) (@vincentfretin)

Click event triggered on the wrong controller with the cursor component (#5782) (@vincentfretin)

Fix incorrect error handling when an image fails to load in the material component (#5781) (@vincentfretin, @mrxz)

Prevent erronously caching images that have failed to load (#5778)

Identify controllers by id instead of idPrefix in tracked-controls (fix #5772) (#5774) (@vincentfretin)

Fix issue where controller model is not visibile when toggling between hands and controllers (fix #5757) (#5777) (@vincentfretin)

Use unique cache keys per file type when caching to match THREE r178+ convention (#5776) (@vincentfretin)

Fix axis names for Windows motion controls (#5732) (@hazho)

Make quad layers feature optional so it works on devices not supporting WebXR layers like Apple Vision Pro (#5722) (@vincentfretin)

Fix wrong geometry size in layer component (#5723) (@vincentfretin)

Fix check for XRWebGLBinding existance in layer component (#5721) (@vincentfretin, @mrxz)

Replace npot property in material component with the more explicit minFilter and magFilter (#5717) (@mrxz)

Verify this.quadPanelEl exists before toggling the layer visibility (#5708) (@vincentfretin)

Enhancements

Reintroduce needsRedraw flag to force updates on the layer component (#5724) (@vincentfretin)

Replace rStats with stats-gl in stats component (fix #5397) (#5700) (@arvind-iyer)

Remove stats div from DOM when removing the stats component (#5733) (@vincentfretin)

Update shadow light properties only for lights that support shadows (#5748) (@mrxz)

Improve Logitech MX support: Enable use in AR mode, support variable brush stroke on button / tip pressuer (#5756) (@FilipeLopesPires)

Remove obsolete variable assignments in tracked-controls component (#5770) (@vincentfretin)

Remove obsolete / dead logic to rotate the Meta Touch model thumbstick (#5775) (@vincentfretin)

Set raycaster.camera to the active camera in order to raycast against sprites (@vincentfretin)

Expose premultipliedAlpha on material component (#5810) (@vincentfretin)

Docs improvements (@vincentfretin, @thatguyjk, @Utopiah, @ccoenen, @mrxz, @vaibhavyxx, @Omegahed, @dmarcos)

Improve tests (@vincentfretin, @kitsiosk, @dmarcos)

Build system improvements (@vincentfretin, @mrxz, @daj, @dmarcos)

Set generateMipmaps for material component (#5726) (@vincentfretin, @mrxz)

Don't unnecessarily initialize 6 canvas for quad layers. (#5707) (@vincentfretin)

Set meshMixin property default value to correct type in real-world-mesh componet (#5712) (@vaibhavyxx)

... (truncated)

Changelog

Sourced from aframe's changelog.

1.8.0 (June 23, 2026)

Major Changes

Update THREE to r184 (@vincentfretin, @mrxz, @dmarcos)

Bug fixes and improvements.

Bug fixes

Fix issue when a loaded cube texture doesn't contribute to light probes (fix #5734) (#5735) (@mrxz)

Fix issue when url of gltf-model changes when model is still loading (#5739) (@mrxz)

Address unsafe-eval error with with strict Content Security Policy (CSP) (fix #5028) (#5821) (@vincentfretin, @samiemad, @mrxz)

Replace Clock instance by Timer instance. Clock is deprecated in THREE r183+ (#5800) (@vincentfretin)

Remove pcfsoft shadow type in shadow component, deprecated in THREE r182+ fallback to pcf (#5798) (@vincentfretin, @mrxz)

Set dialogs text color explictitly to ovverride browser defaults that might result on white text on white background (#5814) (@vincentfretin)

Fix issue when a tracked controller disconnects and reconnects (#5804) (@vincentfretin)

Fix hand-controls orientation on Meta Quest Controllers (fix #5570, #5305, #5321) (#5766) (@filandra)

Fix missing pixel row when capturing an image with the screenshot component (fix #5789) (#5790) (@diarmidmackenzie)

Fix issue with loading screen dismissed prematurely while images are still loading (#5779) (@vincentfretin)

Click event triggered on the wrong controller with the cursor component (#5782) (@vincentfretin)

Fix incorrect error handling when an image fails to load in the material component (#5781) (@vincentfretin, @mrxz)

Prevent erronously caching images that have failed to load (#5778)

Identify controllers by id instead of idPrefix in tracked-controls (fix #5772) (#5774) (@vincentfretin)

Fix issue where controller model is not visibile when toggling between hands and controllers (fix #5757) (#5777) (@vincentfretin)

Use unique cache keys per file type when caching to match THREE r178+ convention (#5776) (@vincentfretin)

Fix axis names for Windows motion controls (#5732) (@hazho)

Make quad layers feature optional so it works on devices not supporting WebXR layers like Apple Vision Pro (#5722) (@vincentfretin)

Fix wrong geometry size in layer component (#5723) (@vincentfretin)

Fix check for XRWebGLBinding existance in layer component (#5721) (@vincentfretin, @mrxz)

Replace npot property in material component with the more explicit minFilter and magFilter (#5717) (@mrxz)

Verify this.quadPanelEl exists before toggling the layer visibility (#5708) (@vincentfretin)

Enhancements

Reintroduce needsRedraw flag to force updates on the layer component (#5724) (@vincentfretin)

Replace rStats with stats-gl in stats component (fix #5397) (#5700) (@arvind-iyer)

Remove stats div from DOM when removing the stats component (#5733) (@vincentfretin)

Update shadow light properties only for lights that support shadows (#5748) (@mrxz)

Improve Logitech MX support: Enable use in AR mode, support variable brush stroke on button / tip pressuer (#5756) (@FilipeLopesPires)

Remove obsolete variable assignments in tracked-controls component (#5770) (@vincentfretin)

Remove obsolete / dead logic to rotate the Meta Touch model thumbstick (#5775) (@vincentfretin)

Set raycaster.camera to the active camera in order to raycast against sprites (@vincentfretin)

Expose premultipliedAlpha on material component (#5810) (@vincentfretin)

Docs improvements (@vincentfretin, @thatguyjk, @Utopiah, @ccoenen, @mrxz, @vaibhavyxx, @Omegahed, @dmarcos)

Improve tests (@vincentfretin, @kitsiosk, @dmarcos)

Build system improvements (@vincentfretin, @mrxz, @daj, @dmarcos)

Set generateMipmaps for material component (#5726) (@vincentfretin, @mrxz)

Don't unnecessarily initialize 6 canvas for quad layers. (#5707) (@vincentfretin)

Set meshMixin property default value to correct type in real-world-mesh componet (#5712) (@vaibhavyxx)

Use XRMediaBinding.createQuadLayer to render flat video on a layer (@vincentfretin)

... (truncated)

Commits

77f0513 Update docs
c315c55 Update builds
9332f47 Bump command version
29aac84 Update master CDN URL. (https://cdn.jsdelivr.net/gh/aframevr/aframe@c9e572a3a...
c9e572a Bump aframe-master dist/ builds. (https://github.com/aframevr/aframe/compare/...
47a08f1 Bump version
01d48ca Update changelog
3abc547 update licence year
273a1cd [docs] Fix code snippet for AFRAME_ASYNC, need to call emitReady(), not ready...
6ae0147 Update master CDN URL. (https://cdn.jsdelivr.net/gh/aframevr/aframe@dfe287b70...
Additional commits viewable in compare view

Updates npm-check-updates from 22.2.3 to 22.2.7

Release notes

Sourced from npm-check-updates's releases.

v22.2.7

What's Changed

Fix CodeQL issues by @XhmikosR in raineorshine/npm-check-updates#1813

Escape package name and reuse escapeRegExp by @XhmikosR in raineorshine/npm-check-updates#1838

Remove redundant awaits and enable @typescript-eslint/await-thenable by @XhmikosR in raineorshine/npm-check-updates#1839

Stop exporting the externally unused getOwnerPerDependency by @XhmikosR in raineorshine/npm-check-updates#1840

Perf improvements by @XhmikosR in raineorshine/npm-check-updates#1843

Move configs out of package.json by @XhmikosR in raineorshine/npm-check-updates#1841

build(deps): downgrade ini from 7.0.0 to 6.0.0 to restore Node 20 support by @raineorshine in raineorshine/npm-check-updates#1845

Full Changelog: raineorshine/npm-check-updates@v22.2.6...v22.2.7

v22.2.6

What's Changed

build(deps-dev): bump @typescript-eslint/eslint-plugin by @dependabot[bot] in raineorshine/npm-check-updates#1787

build(deps-dev): bump @typescript-eslint/parser from 8.60.1 to 8.61.0 by @dependabot[bot] in raineorshine/npm-check-updates#1788

build(deps-dev): bump @microsoft/api-extractor from 7.58.7 to 7.58.8 by @dependabot[bot] in raineorshine/npm-check-updates#1789

build(deps-dev): bump eslint-plugin-n from 18.0.1 to 18.1.0 by @dependabot[bot] in raineorshine/npm-check-updates#1790

build(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @dependabot[bot] in raineorshine/npm-check-updates#1792

build(deps-dev): bump semver from 7.8.2 to 7.8.3 by @dependabot[bot] in raineorshine/npm-check-updates#1793

build(deps-dev): bump cosmiconfig from 9.0.1 to 9.0.2 by @dependabot[bot] in raineorshine/npm-check-updates#1791

build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 by @dependabot[bot] in raineorshine/npm-check-updates#1795

Dependabot: add github-actions updates and group updates with a cooldown by @XhmikosR in raineorshine/npm-check-updates#1785

CI: harden and align GitHub Actions workflows by @XhmikosR in raineorshine/npm-check-updates#1786

feat: respect min-release-age-exclude with min-release-age npm config by @Cherry in raineorshine/npm-check-updates#1797

feat: add Claude Code SKILL file for npm-check-updates by @ilteoood in raineorshine/npm-check-updates#1798

build(deps): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in raineorshine/npm-check-updates#1799

Quote global package specs with a period in the scope for PowerShell compatibility by @raineorshine with @Copilot in raineorshine/npm-check-updates#1800

Add a GitHub workflow to clean up closed PRs' caches by @XhmikosR in raineorshine/npm-check-updates#1804

package.json: fix npm scripts to be cross-platform by @XhmikosR in raineorshine/npm-check-updates#1805

Replace the unmaintained npm-run-all with npm-run-all2 and removed unused deps by @XhmikosR in raineorshine/npm-check-updates#1806

build workflow: add npm pack --dry-run by @XhmikosR in raineorshine/npm-check-updates#1807

test/e2e.sh: fix shellcheck issues by @XhmikosR in raineorshine/npm-check-updates#1808

Replace rfdc with native structuredClone by @XhmikosR in raineorshine/npm-check-updates#1809

Replace js-yaml with yaml by @XhmikosR in raineorshine/npm-check-updates#1810

Replace dequal with node:util isDeepStrictEqual by @XhmikosR in raineorshine/npm-check-updates#1811

fix: do not call semver.minVersion on non-semver package protocols by @duniul in raineorshine/npm-check-updates#1767

Convert inline code backticks to <code> in generated HTML tables by @XhmikosR in raineorshine/npm-check-updates#1814

Fix skills by @XhmikosR in raineorshine/npm-check-updates#1815

Vite: use 'oxc' for minify by @XhmikosR in raineorshine/npm-check-updates#1816

build(deps): bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in raineorshine/npm-check-updates#1817

build-options.ts: split README and schema writes, drop duplicate RunOptions.json write by @XhmikosR in raineorshine/npm-check-updates#1818

Remove lodash-es by @XhmikosR in raineorshine/npm-check-updates#1819

Replace cosmiconfig with lilconfig by @XhmikosR in raineorshine/npm-check-updates#1812

Remove redundant Promise.resolve in fetchUpgradedPackument by @XhmikosR in raineorshine/npm-check-updates#1823

Switch to async/await in a few more places by @XhmikosR in raineorshine/npm-check-updates#1824

Replace forEach with for...of by @XhmikosR in raineorshine/npm-check-updates#1825

Yarn test fixes by @XhmikosR in raineorshine/npm-check-updates#1828

fix padLeft adding trailing spaces to blank lines by @XhmikosR in raineorshine/npm-check-updates#1829

... (truncated)

Commits

860e348 22.2.7
9876052 build(deps): downgrade ini from 7.0.0 to 6.0.0 to restore Node 20 support (#1...
2ab080f Move configs out of package.json (#1841)
7040fc3 Merge pull request #1843 from raineorshine/xmr/perf
ba8e062 Stop exporting the externally unused getOwnerPerDependency (#1840)
e0a953f Remove redundant awaits and enable @typescript-eslint/await-thenable (#1839)
56b545a Escape package name and reuse escapeRegExp (#1838)
9c0fded Fix CodeQL issues (#1813)
3aca2c5 fix: replace spread-reduce with for-of in getIgnoredUpgradesDueToEnginesNode
ee458a4 fix: skip already-visited nodes in isCircularPeer to avoid redundant traversal
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 2 updates: [aframe](https://github.com/aframevr/aframe) and [npm-check-updates](https://github.com/raineorshine/npm-check-updates). Updates `aframe` from 1.7.1 to 1.8.0 - [Release notes](https://github.com/aframevr/aframe/releases) - [Changelog](https://github.com/aframevr/aframe/blob/master/CHANGELOG.md) - [Commits](aframevr/aframe@v1.7.1...v1.8.0) Updates `npm-check-updates` from 22.2.3 to 22.2.7 - [Release notes](https://github.com/raineorshine/npm-check-updates/releases) - [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md) - [Commits](raineorshine/npm-check-updates@v22.2.3...v22.2.7) --- updated-dependencies: - dependency-name: aframe dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: npm-check-updates dependency-version: 22.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 25, 2026

lunarcloud merged commit 86a669f into main Jun 25, 2026
1 check passed

lunarcloud deleted the dependabot/npm_and_yarn/npm-dependencies-4813a36d13 branch June 25, 2026 10:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm-dependencies group with 2 updates#147

Bump the npm-dependencies group with 2 updates#147
lunarcloud merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-4813a36d13

dependabot Bot commented on behalf of github Jun 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 25, 2026

v1.8.0

1.8.0 (June 23, 2026)

Major Changes

Bug fixes

Enhancements

1.8.0 (June 23, 2026)

Major Changes

Bug fixes

Enhancements

v22.2.7

What's Changed

v22.2.6

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant