build(deps): bump the npm-production group across 1 directory with 5 updates

[dependabot]

Bumps the npm-production group with 4 updates in the / directory: @codemirror/autocomplete, @codemirror/commands, @codemirror/lang-javascript and @codemirror/language.

Updates @codemirror/autocomplete from 6.20.0 to 6.20.1

Changelog

Sourced from @​codemirror/autocomplete's changelog.

6.20.1 (2026-03-02)

Bug fixes

Clicking the horizontal dots at the top/bottom of a list of completion options now moves the selection there, so that more completions become visible.

Commits

• 7cbf7fd Mark version 6.20.1
• 1fae8fb Use git+https format for package.json repository field
• 90412d8 Respond to clicks on the top/bottom of incomplete option lists by moving sele...
• e8521c2 Align interpretation of wordChars language data with @​codemirror/state
• See full diff in compare view

Updates @codemirror/commands from 6.10.1 to 6.10.3

Changelog

Sourced from @​codemirror/commands's changelog.

6.10.3 (2026-03-12)

Bug fixes

Make sure selection-extending commands preserve the associativity of the selection head.

6.10.2 (2026-02-06)

Bug fixes

Move the selection to a less surprising place when undoing, moving the selection, redoing, then undoing again.

Commits

• 6f83cb9 Mark version 6.10.3
• 8364073 Properly preserve selection associativity in selection-extending commands
• aa61d5c Add more tests for vertical cursor and selection motion
• dbae3a1 Mark version 6.10.2
• beecd58 Use a more reasonable start selection for the inverse of applied history events
• 0587e5d Add a test cursorLineDown skipping trailing inline widgets
• fe13f95 Add some more explicit type annotations
• 2f99b7b Use git+https format for package.json repository field
• a6196d9 Query configuration at start of line in changeLineComment
• See full diff in compare view

Updates @codemirror/lang-javascript from 6.2.4 to 6.2.5

Changelog

Sourced from @​codemirror/lang-javascript's changelog.

6.2.5 (2026-03-02)

Bug fixes

Support code folding of JSX elements and tags.

When reading properties in scopeCompletionSource, use the original object, not a prototype.

Commits

• a202a00 Mark version 6.2.5
• 190b567 Fix missing inherited getters in enumeratePropertyCompletions
• a94cdcb Add folding for JSX elements and tags
• 78a8521 Use git+https format for package.json repository field
• See full diff in compare view

Updates @codemirror/language from 6.12.1 to 6.12.2

Changelog

Sourced from @​codemirror/language's changelog.

6.12.2 (2026-02-25)

Bug fixes

Make sure brackets are highlighted in the initial editor state.

Pause bracket matching updates during composition, to avoid disrupting Mobile Safari's fragile composition handling.

Commits

• b5cd54b Mark version 6.12.2
• 5f86763 Pause bracket matching updates during composition
• af8dca9 Properly show matched brackets in the initial editor state
• 693a25e Use git+https format for package.json repository field
• See full diff in compare view

Updates @codemirror/state from 6.5.4 to 6.6.0

Changelog

Sourced from @​codemirror/state's changelog.

6.6.0 (2026-03-12)

New features

EditorSelection.range now takes an optional assoc argument.

SelectionRange.extend can now be given a third argument to specify associativity.

Commits

• 821d9b7 Mark version 6.6.0
• e035c74 Support an assoc argument to EditorSelection.range and SelectionRange.extend
• eef74db Add type conversions to asArray
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​codemirror/​commands@​6.10.1 ⏵ 6.10.3	+1		+1
	@​codemirror/​autocomplete@​6.20.0 ⏵ 6.20.1	+1		+1

View full report

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.