Skip to content

fix: bump the prod-dependencies group across 1 directory with 2 updates#1336

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-1ba231c501
Open

fix: bump the prod-dependencies group across 1 directory with 2 updates#1336
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-1ba231c501

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 2 updates in the / directory: media-chrome and castable-video.

Updates media-chrome from 4.19.0 to 4.19.2

Release notes

Sourced from media-chrome's releases.

v4.19.2

Bug Fixes

  • treat only remote.state === "connected" as casting (#1296) (155e46d)

v4.19.1

Bug Fixes

Changelog

Sourced from media-chrome's changelog.

4.19.2 (2026-06-10)

Bug Fixes

  • treat only remote.state === "connected" as casting (#1296) (155e46d)

4.19.1 (2026-06-01)

Bug Fixes

Commits
  • cf88c4a chore(release): 4.19.2
  • f4a4168 docs(CHANGELOG): 4.19.2
  • 155e46d fix: treat only remote.state === "connected" as casting (#1296)
  • c993c50 chore(release): 4.19.1
  • ca8dcce docs(CHANGELOG): 4.19.1
  • 7e0869a fix: add inline-flex alignment to slot[name=icon] for proper SVG centering in...
  • 3cea3c5 Revert "Merge branch 'main' into dev-main"
  • 49785ef fix: round playback rate display to avoid Safari float drift (#1292)
  • fc4271a Merge branch 'main' into dev-main
  • e6c3491 cd: remove NODE_AUTH_TOKEN from cd workflow (#1293)
  • Additional commits viewable in compare view

Updates castable-video from 1.1.13 to 1.1.16

Release notes

Sourced from castable-video's releases.

castable-video: v1.1.16

1.1.16 (2026-05-06)

Bug Fixes

  • use private field in #castPlayer getter to avoid side effects (#244) (d27f204)

castable-video: v1.1.15

1.1.15 (2026-05-04)

Bug Fixes

castable-video: v1.1.14

1.1.14 (2026-04-29)

Bug Fixes

  • correct hlsSegmentFormat for HLS streams with AAC audio in castable-video (#234) (a547dc2)
Changelog

Sourced from castable-video's changelog.

1.1.16 (2026-05-06)

Bug Fixes

  • use private field in #castPlayer getter to avoid side effects (#244) (d27f204)

1.1.15 (2026-05-04)

Bug Fixes

1.1.14 (2026-04-29)

Bug Fixes

  • correct hlsSegmentFormat for HLS streams with AAC audio in castable-video (#234) (a547dc2)
Commits
  • a88988c chore: release main (#245)
  • d27f204 fix: use private field in #castPlayer getter to avoid side effects (#244)
  • 5bd38f0 chore: release main (#240)
  • 7271ee3 fix: format castable mixin
  • 2dc069b chore: release main (#231)
  • a547dc2 fix: correct hlsSegmentFormat for HLS streams with AAC audio in castable-vide...
  • 502bf40 Revert castable video fix for convention commit (#233)
  • 039b0cf fix correct hlsSegmentFormat for HLS streams with AAC audio in castable-video...
  • See full diff in compare view


Note

Low Risk
Patch-level dependency updates with no repo code changes; risk is limited to upstream player UI and Chromecast/HLS casting behavior.

Overview
Bumps media-chrome from 4.19.0 to 4.19.2 and castable-video from 1.1.13 to 1.1.16, with matching updates in package-lock.json.

@mux/mux-player and the Next.js example pin media-chrome at the new range; @mux/mux-video pins castable-video. No application source changes—only dependency versions.

Reviewed by Cursor Bugbot for commit 038bc59. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 10, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 10, 2026 23:05
@vercel

vercel Bot commented Jun 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
elements-demo-astro Ready Ready Preview, Comment Jun 22, 2026 11:08pm
elements-demo-nextjs Ready Ready Preview, Comment Jun 22, 2026 11:08pm
elements-demo-svelte-kit Ready Ready Preview, Comment Jun 22, 2026 11:08pm
elements-demo-vanilla Ready Ready Preview, Comment Jun 22, 2026 11:08pm
elements-demo-vue Ready Ready Preview, Comment Jun 22, 2026 11:08pm

Request Review

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 954206e. Configure here.

Comment thread package-lock.json
"@mux/playback-core": "0.35.1",
"@types/google_interactive_media_ads_types": "^3.697.0",
"castable-video": "~1.1.13",
"castable-video": "^1.1.16",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lockfile castable-video range mismatch

Low Severity

This commit keeps castable-video at ~1.1.16 in packages/mux-video/package.json, but the workspace entry in package-lock.json records ^1.1.16. That diverges from the prior ~1.1.13 pairing and can allow broader semver resolution on later installs than the package manifest intends.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 954206e. Configure here.

@snyk-io

snyk-io Bot commented Jun 10, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Bumps the prod-dependencies group with 2 updates in the / directory: [media-chrome](https://github.com/muxinc/media-chrome) and [castable-video](https://github.com/muxinc/media-elements/tree/HEAD/packages/castable-video).


Updates `media-chrome` from 4.19.0 to 4.19.2
- [Release notes](https://github.com/muxinc/media-chrome/releases)
- [Changelog](https://github.com/muxinc/media-chrome/blob/main/CHANGELOG.md)
- [Commits](muxinc/media-chrome@v4.19.0...v4.19.2)

Updates `castable-video` from 1.1.13 to 1.1.16
- [Release notes](https://github.com/muxinc/media-elements/releases)
- [Changelog](https://github.com/muxinc/media-elements/blob/main/packages/castable-video/CHANGELOG.md)
- [Commits](https://github.com/muxinc/media-elements/commits/castable-video@1.1.16/packages/castable-video)

---
updated-dependencies:
- dependency-name: castable-video
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: media-chrome
  dependency-version: 4.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants