Skip to content

chore(deps)(deps): bump the frontend-minor-patch group across 1 directory with 20 updates#437

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/studyhub-app/frontend-minor-patch-b6fde094a9
Open

chore(deps)(deps): bump the frontend-minor-patch group across 1 directory with 20 updates#437
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/studyhub-app/frontend-minor-patch-b6fde094a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-minor-patch group with 20 updates in the /frontend/studyhub-app directory:

Package From To
@capacitor/android 8.4.1 8.4.2
@capacitor/app 8.1.0 8.1.1
@capacitor/cli 8.4.1 8.4.2
@capacitor/core 8.4.1 8.4.2
@capgo/capacitor-social-login 8.3.30 8.3.38
@formkit/auto-animate 0.9.0 0.10.0
@sentry/react 10.59.0 10.66.0
@tanstack/react-virtual 3.14.3 3.14.7
dompurify 3.4.11 3.4.12
katex 0.17.0 0.18.1
marked 18.0.5 18.0.6
posthog-js 1.392.0 1.404.1
react-joyride 3.1.0 3.2.0
react-router-dom 7.18.0 7.18.1
sanitize-html 2.17.5 2.17.6
video.js 8.23.8 8.23.9
@axe-core/playwright 4.11.3 4.12.1
@playwright/test 1.61.0 1.61.1
msw 2.14.6 2.15.0
vitest 4.1.9 4.1.10

Updates @capacitor/android from 8.4.1 to 8.4.2

Release notes

Sourced from @​capacitor/android's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Changelog

Sourced from @​capacitor/android's changelog.

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Commits

Updates @capacitor/app from 8.1.0 to 8.1.1

Release notes

Sourced from @​capacitor/app's releases.

@​capacitor/app@​8.1.1

8.1.1 (2026-07-15)

Note: Version bump only for package @​capacitor/app

Commits

Updates @capacitor/cli from 8.4.1 to 8.4.2

Release notes

Sourced from @​capacitor/cli's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Changelog

Sourced from @​capacitor/cli's changelog.

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Commits

Updates @capacitor/core from 8.4.1 to 8.4.2

Release notes

Sourced from @​capacitor/core's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Changelog

Sourced from @​capacitor/core's changelog.

8.4.2 (2026-07-14)

Bug Fixes

  • android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)
Commits

Updates @capgo/capacitor-social-login from 8.3.30 to 8.3.38

Release notes

Sourced from @​capgo/capacitor-social-login's releases.

8.3.38

🆕 Changelog

Fixed

  • Improved Google Sign-In reliability on Android by automatically retrying authentication when account re-authentication is required (error 16).

🔗 Full Changelog: Cap-go/capacitor-social-login@8.3.37...8.3.38

8.3.37

🆕 Changelog

Fixed

  • Android: Removed leftover com.facebook stub dependencies when Facebook login is disabled. This reduces app size and avoids unnecessary package references for builds that do not use Facebook integration.

🔗 Full Changelog: Cap-go/capacitor-social-login@8.3.36...8.3.37

8.3.36

🆕 Changelog

Changelog was not generated automatically for this release.


🔗 Full Changelog: Cap-go/capacitor-social-login@8.3.36...8.3.36

8.3.35

🆕 Changelog

Added

  • Documentation for OAuth endpoint aliases, providing clarity on available authentication endpoints
  • Comprehensive Keycloak OAuth setup guide to help users integrate Keycloak authentication

🔗 Full Changelog: Cap-go/capacitor-social-login@8.3.34...8.3.35

8.3.34

🆕 Changelog

Changed

  • Expanded Android troubleshooting documentation for Google Sign-In with comprehensive guidance on Google Credential Manager setup, including detailed requirements for Web and Android OAuth client configuration, SHA-1 fingerprint extraction methods, and common misconfiguration scenarios
  • Enhanced Google Sign-In error diagnostics on Android by logging package name, signing SHA-1, and masked webClientId at initialization and login to aid troubleshooting

... (truncated)

Commits
  • 4868373 chore(release): 8.3.38
  • 452c539 fix(android): auto-retry Google Sign-In on error 16 account reauth failed (#430)
  • e1324e4 chore(release): 8.3.37
  • efcf15a Merge pull request #428 from Cap-go/fix/facebook-disabled-no-com-facebook-stubs
  • 9814a56 fix(android): drop com.facebook stubs when Facebook is disabled
  • 67895e3 chore(release): 8.3.36
  • 9683eaf Merge branch 'chore/cloudflare-ai-changelog'
  • d6cac84 fix(ci): format changelog script for prettier/eslint.
  • 9c609e1 fix(ci): use absolute git path for changelog script.
  • 9efc85f Switch release changelog to Cloudflare Workers AI.
  • Additional commits viewable in compare view

Updates @formkit/auto-animate from 0.9.0 to 0.10.0

Release notes

Sourced from @​formkit/auto-animate's releases.

v0.10.0

Features

  • Marko v6 integration — a new <auto-animate> tag exported from @formkit/auto-animate/marko (#239). Pass your parent element's tag variable (<ul/listRef>parent=listRef), with optional options and a reactive enabled attribute. SSR/resume safe. Thanks @​defunkt-dev!

Docs

CI

  • Releases are now published to npm via OIDC trusted publishing on v* tag pushes.
Commits
  • b6a6fee ci: use bundled npm for trusted publishing
  • 00b8944 ci: add trusted publishing and release workflows
  • 75ba14d chore: release v0.10.0
  • a73b637 test: scope framework demo selectors and cover Marko example
  • 01c5f5b Merge pull request #239 from defunkt-dev/master
  • e0a1b15 docs support
  • 35ac0ad fix some ts errors
  • 7f1d60a e2e ssr test suite for marko
  • 8b1ef37 e2e test suite for marko
  • 304efab feat: marko v6 auto-animate integration
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​formkit/auto-animate since your current version.


Updates @sentry/react from 10.59.0 to 10.66.0

Release notes

Sourced from @​sentry/react's releases.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)
  • ref(nuxt): Build the Nuxt module in-house instead of @​nuxt/module-builder (#22190)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)

... (truncated)

Commits
  • 323cbf6 release: 10.66.0
  • 85d0619 Merge pull request #22315 from getsentry/prepare-release/10.66.0
  • bddcb83 meta(changelog): Update changelog for 10.66.0
  • 595e940 feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • 667cb71 fix(browser): Propagate trace data from active span if http.client span is ...
  • e8d7bd4 fix(core): Preserve propagation across ignored spans (#22277)
  • bd69bd9 chore(node-core): Deprecate @sentry/node-core package (#22285)
  • c04ebda fix(react): Preserve parent path prefix for descendant route names in `react-...
  • 2cbacb5 feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22...
  • c9716eb feat(server-utils): Capture and log orchestrion stats (#22269)
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.3 to 3.14.7

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.7

Patch Changes

@​tanstack/react-virtual@​3.14.6

Patch Changes

@​tanstack/react-virtual@​3.14.5

Patch Changes

@​tanstack/react-virtual@​3.14.4

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.7

Patch Changes

3.14.6

Patch Changes

3.14.5

Patch Changes

3.14.4

Patch Changes

Commits

Updates dompurify from 3.4.11 to 3.4.12

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible
Commits

Updates katex from 0.17.0 to 0.18.1

Release notes

Sourced from katex's releases.

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
Changelog

Sourced from katex's changelog.

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
Commits
  • cdf479f chore(release): 0.18.1 [ci skip]
  • 87a2b30 fix(htmlData): allow escaped commas in \htmlData (#4236)
  • 2318066 chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)
  • 3b5b6a0 chore(deps): bump actions/checkout from 6 to 7 (#4232)
  • 4e9d31a chore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)
  • b7ca8f0 chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)
  • bf1a59f chore: use pixel diff as fallback for byte-to-byte (#4245)
  • 4d9d0ae chore(release): 0.18.0 [ci skip]
  • 6f5c44f feat: prefix css classes (#4229)
  • 2c6143a refactor: remove direct hasOwnProperty call (#4230)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates marked from 18.0.5 to 18.0.6

Release notes

Sourced from marked's releases.

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

  • Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
  • Fix ordered lists after blockquotes (#4003) (33928d0)
  • keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)
Commits
  • 39bd884 chore(release): 18.0.6 [skip ci]
  • 6bce57d chore(deps-dev): bump @​semantic-release/github from 12.0.8 to 12.0.9 (#4009)
  • 63a4bba chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.0 (#4010)
  • a009808 fix: Avoid O(n^2) backtracking in inline link href regex (#4013)
  • 33928d0 fix: Fix ordered lists after blockquotes (#4003)
  • bbb84c8 fix: keep trailing text on HTML block close line for PI, declarations, and CD...
  • d2af54e chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (#4005)
  • f403898 chore(deps-dev): bump @​arethetypeswrong/cli from 0.18.3 to 0.18.4 (#4006)
  • f8f4112 chore(deps): bump actions/checkout from 6 to 7 (#4000)
  • 5ddfd8a chore: Update repository metadata URLs (#3998)
  • Additional commits viewable in compare view

Updates posthog-js from 1.392.0 to 1.404.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.404.1

1.404.1

Patch Changes

  • #4191 66c1666 Thanks @​turnipdabeets! - Honour the project-level autocapture opt-out when the remote config request fails. Previously a failed config fetch (network error, timeout, blocked request) enabled autocapture on opted-out projects and persisted that state for later page loads. Autocapture now keeps the last successfully received server value, and stays off until the first successful config response. (2026-07-17)

posthog-js@1.404.0

1.404.0

Minor Changes

  • #4149 607bf54 Thanks @​pauldambra! - Add dead swipe detection to dead clicks autocapture. When dead clicks autocapture is enabled, touch swipe gestures that produce no observable screen change (no scroll, mutation, selection or visibility change) are now captured as $dead_swipe events, surfacing failed navigations on touch devices. Configurable via capture_dead_swipes (default true) and swipe_threshold_px (default 30) on the capture_dead_clicks config. Swipes over surfaces whose response cannot be observed (canvas, video and other media elements under the finger) are skipped, and captures are limited per page load via max_dead_swipes_per_page_load (default 10). (2026-07-16)

Patch Changes

  • #4171 df17ddc Thanks @​posthog! - Catch synchronous throws from a monkey-patched window.fetch so they no longer escape as unhandled exceptions. A synchronous throw is now routed through the same handling as an async rejection, so the request queue retries instead of the error leaking into error tracking. (2026-07-16)
  • Updated dependencies [607bf54]:
    • @​posthog/types@​1.397.0

posthog-js@1.403.0

1.403.0

Minor Changes

  • #4159 fad6d9a Thanks @​haacked! - add $feature_flag_has_experiment to $feature_flag_called events

    $feature_flag_called events now carry a $feature_flag_has_experiment boolean sourced from the server's has_experiment flag metadata (the /flags?v=2 response for remote evaluation, the /api/feature_flag/local_evaluation definitions for posthog-node local evaluation). The property is only sent when the server explicitly reports has_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)

Patch Changes

  • Updated dependencies [fad6d9a]:
    • @​posthog/core@​1.43.0
    • @​posthog/types@​1.396.0

posthog-js@1.402.3

1.402.3

Patch Changes

  • #4157 4a2ecf5 Thanks @​posthog! - Session recording no longer emits an uncaught NotAllowedError ("Sharing constructed stylesheets in multiple documents is not allowed") when a page assigns a CSSStyleSheet constructed in a different document to adoptedStyleSheets. That assignment is the host page's own invalid operation, but the recorder's patched setter sat on the call stack, so the exception was attributed to rrweb and churned fingerprints in error tracking. The recorder now contains this specific rejection (matched by its standardized NotAllowedError name, so it works even when the setter throws from an iframe realm) and skips recording those sheets, while still re-throwing any other native-setter error so host-page behaviour is preserved. (2026-07-15)

  • #4158 0dc389e Thanks @​posthog! - fix(replay): session recording no longer throws TypeError: Converting circular structure to JSON when replay event data contains a circular reference. The circular-reference guard now also detects cycles that pass through an array, and affected events are captured with [Circular] markers instead of surfacing an unhandled error and being dropped. (2026-07-15)

  • Updated dependencies [fc2cb2e]:

    • @​posthog/core@​1.42.1

... (truncated)

Commits
  • da1d781 chore: update versions and lockfile [version bump]
  • 8bf1b19 chore: ban object-literal type assertions in package sources (#4192)
  • 66c1666 fix(autocapture): keep server opt-out when remote config fetch fails (#4191)
  • 635b73e chore: update versions and lockfile [version bump]
  • 7b8a11c feat: publish browser-common (#4190)
  • 6326610 chore: update versions and lockfile [version bump]
  • 45f5488 feat(prompts): Fetch prompts by label (#4163)
  • 97b2a55 chore: update versions and lockfile [version bump]
  • 607bf54 feat(dead-clicks): detect dead swipes as $dead_swipe events (#4149)
  • df17ddc fix(web): route synchronous fetch throws through the request queue (#4171)
  • Additional commits viewable in compare view

Updates react-joyride from 3.1.0 to 3.2.0

Release notes

Sourced from react-joyride's releases.

3.2.0

  • Upgrade dependencies: a519b010525d63cfe58cf7d88a9556815d67ad6f
  • Update playwright config: 146f421583aa9b38fbeef7d99ed50e0c0484398e
  • Website: Upgrade dependencies: 27bc889f1e79dc23afbd8c68ba2152aaa05d7066
  • Website: refactor dev setup: 16dc0fc06264df9b3924c9bdf5915b261dd66147
  • Demos: fix Overview step: 6c52a07fdb2358046c1d3d395e3a312a6445808e
  • Demos: update color picker and styles: c66147c991218cc00474a85d337bd2799d637f54
  • Refactor spotlight positioning: 4dd0fcab17a3c25f20eaf4e8ed73df410dadaf6e
Commits

…tory with 20 updates

Bumps the frontend-minor-patch group with 20 updates in the /frontend/studyhub-app directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/android](https://github.com/ionic-team/capacitor) | `8.4.1` | `8.4.2` |
| [@capacitor/app](https://github.com/ionic-team/capacitor-plugins) | `8.1.0` | `8.1.1` |
| [@capacitor/cli](https://github.com/ionic-team/capacitor) | `8.4.1` | `8.4.2` |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.4.1` | `8.4.2` |
| [@capgo/capacitor-social-login](https://github.com/Cap-go/capacitor-social-login) | `8.3.30` | `8.3.38` |
| [@formkit/auto-animate](https://github.com/formkit/auto-animate) | `0.9.0` | `0.10.0` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.59.0` | `10.66.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.3` | `3.14.7` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.11` | `3.4.12` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` |
| [marked](https://github.com/markedjs/marked) | `18.0.5` | `18.0.6` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.392.0` | `1.404.1` |
| [react-joyride](https://github.com/gilbarbara/react-joyride) | `3.1.0` | `3.2.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.0` | `7.18.1` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.5` | `2.17.6` |
| [video.js](https://github.com/videojs/video.js) | `8.23.8` | `8.23.9` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.3` | `4.12.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.61.1` |
| [msw](https://github.com/mswjs/msw) | `2.14.6` | `2.15.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |



Updates `@capacitor/android` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.4.1...8.4.2)

Updates `@capacitor/app` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/ionic-team/capacitor-plugins/releases)
- [Changelog](https://github.com/ionic-team/capacitor-plugins/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ionic-team/capacitor-plugins/compare/@capacitor/app@8.1.0...@capacitor/app@8.1.1)

Updates `@capacitor/cli` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.4.1...8.4.2)

Updates `@capacitor/core` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.4.1...8.4.2)

Updates `@capgo/capacitor-social-login` from 8.3.30 to 8.3.38
- [Release notes](https://github.com/Cap-go/capacitor-social-login/releases)
- [Changelog](https://github.com/Cap-go/capacitor-social-login/blob/main/CHANGELOG.md)
- [Commits](Cap-go/capacitor-social-login@8.3.30...8.3.38)

Updates `@formkit/auto-animate` from 0.9.0 to 0.10.0
- [Release notes](https://github.com/formkit/auto-animate/releases)
- [Commits](formkit/auto-animate@0.9.0...v0.10.0)

Updates `@sentry/react` from 10.59.0 to 10.66.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.59.0...10.66.0)

Updates `@tanstack/react-virtual` from 3.14.3 to 3.14.7
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.7/packages/react-virtual)

Updates `dompurify` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.11...3.4.12)

Updates `katex` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1)

Updates `marked` from 18.0.5 to 18.0.6
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.5...v18.0.6)

Updates `posthog-js` from 1.392.0 to 1.404.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.392.0...posthog-js@1.404.1)

Updates `react-joyride` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/gilbarbara/react-joyride/releases)
- [Commits](gilbarbara/react-joyride@v3.1.0...v3.2.0)

Updates `react-router-dom` from 7.18.0 to 7.18.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom)

Updates `sanitize-html` from 2.17.5 to 2.17.6
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `video.js` from 8.23.8 to 8.23.9
- [Release notes](https://github.com/videojs/video.js/releases)
- [Changelog](https://github.com/videojs/video.js/blob/main/CHANGELOG.md)
- [Commits](videojs/video.js@v8.23.8...v8.23.9)

Updates `@axe-core/playwright` from 4.11.3 to 4.12.1
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/dequelabs/axe-core-npm/commits)

Updates `@playwright/test` from 1.61.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.61.1)

Updates `msw` from 2.14.6 to 2.15.0
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.14.6...v2.15.0)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@capacitor/android"
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@capacitor/app"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@capacitor/cli"
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@capacitor/core"
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@capgo/capacitor-social-login"
  dependency-version: 8.3.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@formkit/auto-animate"
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@sentry/react"
  dependency-version: 10.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: katex
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: marked
  dependency-version: 18.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: posthog-js
  dependency-version: 1.404.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: react-joyride
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: video.js
  dependency-version: 8.23.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: msw
  dependency-version: 2.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: frontend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploying studyhub with  Cloudflare Pages  Cloudflare Pages

Latest commit: ca2abbd
Status:🚫  Build failed.

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants