Skip to content

chore(deps): bump vega-expression, vega and vega-embed in /packages/web - #753

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/web/multi-3ba9c7725d
Open

chore(deps): bump vega-expression, vega and vega-embed in /packages/web#753
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/web/multi-3ba9c7725d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps vega-expression to 6.2.1 and updates ancestor dependencies vega-expression, vega and vega-embed. These dependencies need to be updated together.

Updates vega-expression from 5.1.2 to 6.2.1

Release notes

Sourced from vega-expression's releases.

v6.2.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by domoritz, a new releaser for vega-expression since your current version.


Updates vega from 5.33.0 to 6.3.1

Release notes

Sourced from vega's releases.

v6.3.0

Changes since v6.2.0

Features

Fixes

  • Expand stroke bounds by half the stroke width with join-aware slack; tighter bounds, miter joins now honored by default (thanks @​stas-sl and @​domoritz!) (via #4302, supersedes #3487)
  • Respect CSS transforms when computing event points (thanks @​letelete and @​domoritz!) (via #4301, supersedes #3978)
  • Correctly handle tickMinStep (thanks @​domoritz!) (via #4162)
  • Clamp negative variance deviation from streaming removes (thanks @​domoritz!) (via #4298)
  • Correct stdevp/variancep for the single-element population case (thanks @​soldenstoll and @​domoritz!) (via #4296, supersedes #4150)
  • Fix bounds calculation for empty visualization with absent legend title (thanks @​betalb and @​domoritz!) (via #4295, supersedes #3936)
  • Let axis description override the default aria-label (thanks @​MarcBaeuerle and @​domoritz!) (via #4294, supersedes #3991)
  • Correct stacking behaviour for null and empty-string categories (thanks @​MarcBaeuerle and @​domoritz!) (via #4292, supersedes #3992)
  • Return adjusted stop from bin transform (thanks @​domoritz!) (via #3967)
  • Parse SVG paths containing a z (closepath) without a following space separator (thanks @​hydrosquall!) (via #4236)
  • Make the max interval of the crossfilter transform exclusive, not inclusive (thanks @​hydrosquall!) (via #4231)
  • Replace dots with underscores in aggregated field names (thanks @​basbroek!) (via #4156)
  • Preserve sign of frame bounds in the window transform (thanks @​btroop!) (via #4153)
  • Avoid prototype pollution in mergeConfig (already published in vega-util 2.1.1) (thanks @​domoritz!) (via #4273)
  • Security fixes merged from private forks (vega-expression codegen, vega-interpreter evaluation, vega-functions modify, vega-selections tuples); the vega-expression fix is first published with this release
  • Fix docstring / function argument validation in vega-selections (already published in 6.1.2) (thanks @​hydrosquall!) (via #4181)
  • Adjust order of ObjectExpression evaluation in vega-interpreter (already published in 2.2.0) (thanks @​hydrosquall!) (via #4138)
  • Include build files in vega-interpreter npm releases (already published in 2.2.1) (thanks @​domoritz!) (via #4139)

Maintenance

  • Migrate vega-util to TypeScript (thanks @​hydrosquall!) (via #4185, #4187, #4188, #4189, #4200, #4202, #4203, #4218, #4219, #4220, #4222)
  • Compare scenegraph tests against goldens by default (thanks @​domoritz!) (via #4305)
  • Raise CI minimum Node.js version to 22 (via #4286)
  • Lint tooling updates: eslint 10, prettier 3.9, husky + lint-staged pre-commit linting (via #4303, #4230)
  • Add package metadata for homepage and issues (via #4282)
  • Update node and TypeScript configuration at the repo root (via #4184)
  • Numerous dependency bumps via dependabot (lerna 9, rollup, babel, jsdom, canvas, d3-format, GitHub Actions, and more)
  • Docs: use the main data set for the domain in the grouped bar chart example (thanks @​sl-solution!) (via #3593); zoomable scatter plot example cleanup (via #4217); grammar and typo fixes (via #4157, #4172, #4175, #4199)

Package versions

Package Old New Reason
vega 6.2.0 6.3.0 minor — aggregates all changes
vega-cli 6.2.0 6.3.0 released alongside vega — its exact vega pin must match the workspace version
vega-crossfilter 5.1.0 5.1.1 fix (#4231)

... (truncated)

Commits
  • c42b7ba chore: release 6.3.1
  • 1691e80 chore(deps): bump fast-uri from 3.1.3 to 3.1.4 in the npm_and_yarn group acro...
  • 008cdd1 chore: fix the lockfile (#4310)
  • b72409b chore: v6.3.0 (#4306)
  • 3cb3686 test: compare scenegraphs against goldens by default (#4305)
  • 36ed71d fix: expand stroke bounds by half stroke width with join-aware slack (#4302)
  • bc4363e fix: respect CSS transforms when computing event points (#4301)
  • b009529 Merge remote-tracking branch 'origin/main' into dom/eslint10
  • 5709a6d chore: update eslint 10
  • 08c821a chore: bump prettier to 3.9 (#4303)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by domoritz, a new releaser for vega since your current version.


Updates vega-embed from 6.22.2 to 7.1.0

Release notes

Sourced from vega-embed's releases.

Release 7.1.0

7.1.0 (2025-10-09)

Bug Fixes

Release 7.0.2

7.0.2 (2025-03-29)

Bug Fixes

  • correct repo entry (7e78bc8)
  • use embed.js for clearer mapping to what file we are using (30a8437)

Release 7.0.1

7.0.1 (2025-03-28)

Bug Fixes

Release 7.0.0

What's Changed

... (truncated)

Changelog

Sourced from vega-embed's changelog.

7.1.0 (2025-10-09)

Bug Fixes

7.0.2 (2025-03-29)

Bug Fixes

  • correct repo entry (7e78bc8)
  • use embed.js for clearer mapping to what file we are using (30a8437)

7.0.1 (2025-03-28)

Bug Fixes

7.0.0 (2025-03-28)

Bug Fixes

6.29.0 (2024-11-19)

Features

6.28.0 (2024-11-07)

Features

6.27.1 (2024-11-07)

Bug Fixes

  • correct types reference (794b9cc)

... (truncated)

Commits
  • 1bd3e9c chore: release v7.1.0
  • 6f47dc0 fix: handle logLevel correctly (#1475)
  • bab3d91 chore(deps-dev): bump del-cli from 6.0.0 to 7.0.0 (#1474)
  • afb1079 chore(deps): bump actions/setup-node from 4 to 5 (#1465)
  • cbc4bc2 chore(deps-dev): bump @​vitest/eslint-plugin from 1.3.6 to 1.3.13 (#1473)
  • bcee73b chore(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#1464)
  • 63c9d5f chore(deps-dev): bump release-it from 19.0.4 to 19.0.5 (#1470)
  • 307f7ab chore(deps-dev): bump typescript from 5.8.3 to 5.9.3 (#1472)
  • 78af475 chore(deps-dev): bump rollup from 4.50.0 to 4.52.3 (#1471)
  • daa266b chore(deps-dev): bump vega-lite from 6.2.0 to 6.4.1 (#1468)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@netlify

netlify Bot commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown

❌ Deploy Preview for thingweb-playground failed. Why did it fail? →

Name Link
🔨 Latest commit 4da524b
🔍 Latest deploy log https://app.netlify.com/projects/thingweb-playground/deploys/6a735cb68f018b0008910a23

@dependabot
chore(deps): bump vega-expression, vega and vega-embed in /packages/web
4da524b 
Bumps [vega-expression](https://github.com/vega/vega) to 6.2.1 and updates ancestor dependencies [vega-expression](https://github.com/vega/vega), [vega](https://github.com/vega/vega) and [vega-embed](https://github.com/vega/vega-embed). These dependencies need to be updated together.


Updates `vega-expression` from 5.1.2 to 6.2.1
- [Release notes](https://github.com/vega/vega/releases)
- [Commits](https://github.com/vega/vega/commits)

Updates `vega` from 5.33.0 to 6.3.1
- [Release notes](https://github.com/vega/vega/releases)
- [Commits](vega/vega@v5.33.0...v6.3.1)

Updates `vega-embed` from 6.22.2 to 7.1.0
- [Release notes](https://github.com/vega/vega-embed/releases)
- [Changelog](https://github.com/vega/vega-embed/blob/main/CHANGELOG.md)
- [Commits](vega/vega-embed@v6.22.2...v7.1.0)

---
updated-dependencies:
- dependency-name: vega
  dependency-version: 6.3.1
  dependency-type: direct:production
- dependency-name: vega-embed
  dependency-version: 7.1.0
  dependency-type: direct:production
- dependency-name: vega-expression
  dependency-version: 6.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/web/multi-3ba9c7725d branch from 55a6000 to 4da524b Compare August 5, 2026 15:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants