Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps the frontend-npm-dependencies group in /frontend with 9 updates:

Package From To
@fortawesome/react-fontawesome 3.1.1 3.2.0
@turf/turf 7.3.3 7.3.4
axios 1.13.4 1.13.5
html-react-parser 5.2.16 5.2.17
motion 12.31.0 12.33.0
@eslint/js 9.39.2 10.0.1
@types/node 25.2.0 25.2.2
@types/react 19.2.11 19.2.13
eslint 9.39.2 10.0.0

Updates @fortawesome/react-fontawesome from 3.1.1 to 3.2.0

Release notes

Sourced from @​fortawesome/react-fontawesome's releases.

v3.2.0

3.2.0 (2026-02-06)

Features

Bug Fixes

Chores

New Contributors

Full Changelog: FortAwesome/react-fontawesome@v3.1.1...v3.2.0

Changelog

Sourced from @​fortawesome/react-fontawesome's changelog.

3.2.0 (2026-02-06)

Features

  • types: export CSSVariables type for user consumption (0e68290)

Bug Fixes

  • env: support for defined process but undefined process.env (243a273)
  • remove some stray spaces (77f64d8)
  • switch order of spread to allow given props to override (1f0690a)
  • undo local package-lock change (7242428)

Chores

  • add a deprecation notice to the title and titleId props (1953e29)
  • deps: upgrade all dev deps (018fa1f)
  • format: fix format issue in changelog (64b449d)
  • format: ignore changelog from prettier as it is autogen'd (ec1c118)
Commits
  • e494888 chore(release): 3.2.0 [skip ci]
  • 9ec75b9 Merge pull request #622 from FortAwesome/feat/export-css-variables-types
  • 0e68290 feat(types): export CSSVariables type for user consumption
  • 42a6aec Merge pull request #621 from FortAwesome/chore/deps-update
  • 018fa1f chore(deps): upgrade all dev deps
  • 7950c97 Merge pull request #616 from FortAwesome/fix/process-env-undefined
  • 243a273 fix(env): support for defined process but undefined process.env
  • 7c3ab9a Merge pull request #615 from FortAwesome/allow-viewbox
  • 1f0690a fix: switch order of spread to allow given props to override
  • ec1c118 chore(format): ignore changelog from prettier as it is autogen'd
  • Additional commits viewable in compare view

Updates @turf/turf from 7.3.3 to 7.3.4

Release notes

Sourced from @​turf/turf's releases.

v7.3.4

Fixed a couple of backwards steps, one that was causing build breaks for users and a bug fix that wasn't backwards compatible.

What's Changed

Full Changelog: Turfjs/turf@v7.3.3...v7.3.4

Commits
  • a087864 v7.3.4
  • 4e70cc2 Added newer kdbush types to @​turf/turf as a dependency to address a clustersD...
  • 53872db Reverted backward incompatible fix to nearestPointOnLine introduced by PR #29...
  • a8a75d6 Fix GitHub Actions badge link in README
  • 9653dba Fix GitHub Actions badge link in README
  • 2669e6a Merge pull request #3014 from Turfjs/releases/7.3.3
  • See full diff in compare view

Updates axios from 1.13.4 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view

Updates html-react-parser from 5.2.16 to 5.2.17

Release notes

Sourced from html-react-parser's releases.

v5.2.17

5.2.17 (2026-02-07)

Bug Fixes

  • deps: bump html-dom-parser from 5.1.7 to 5.1.8 (#2113) (c53a612)
Changelog

Sourced from html-react-parser's changelog.

5.2.17 (2026-02-07)

Bug Fixes

  • deps: bump html-dom-parser from 5.1.7 to 5.1.8 (#2113) (c53a612)
Commits
  • 5841169 Merge pull request #2117 from remarkablemark/release-please--branches--master...
  • 4f7f418 chore(master): release 5.2.17
  • c53a612 fix(deps): bump html-dom-parser from 5.1.7 to 5.1.8 (#2113)
  • 8edf872 Merge pull request #2116 from remarkablemark/build/vitest
  • 54caea9 build(package): upgrade vitest from 3 to 4
  • 9f21e44 Merge pull request #2115 from remarkablemark/test/browser
  • c10da22 chore(vitest): include optimizeDeps for browser config
  • 41b6c30 ci(github): add job integration to workflow test.yml
  • dd79cc0 test: run vitest in browser mode
  • 8025b73 chore(vitest): remove extraneous reporters from config
  • Additional commits viewable in compare view

Updates motion from 12.31.0 to 12.33.0

Changelog

Sourced from motion's changelog.

[12.33.0] 2026-02-05

Added

  • <motion />: New propagate.tap prop prevents tap gestures from propagating to parents.

[12.32.0] 2026-02-05

Added

  • transition.inherit: When true, inherit transition values from less-specific transitions.

[12.31.3] 2026-02-05

Fixed

  • <motion />: Ensure animation state is reset after being re-suspended.
  • Prevent stale values when mixing transitionEnd and transition.type: false.
  • Drag: Fix "sticky" throw velocity on initial interaciton.
  • Drag: Ensure catching a thrown element kills its velocity.

[12.31.2] 2026-02-05

Fixed

  • onHoverStart and onHoverEnd first argument now correctly typed as PointerEvent.
  • whileHover: No longer persists after drag end.
  • AnimatePresence: Allow changing mode prop.

[12.31.1] 2026-02-04

Added

  • Drag constraints updated even when draggable or constraints resize outside of React renders.
Commits

Updates @eslint/js from 9.39.2 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)
  • f0cafe5 feat: rule tester add assertion option requireData (#20409) (fnx)
  • f7ab693 feat: output RuleTester test case failure index (#19976) (ST-DDT)
  • 7cbcbf9 feat: add countThis option to max-params (#20236) (Gerkin)
  • f148a5e feat: add error assertion options (#20247) (ST-DDT)
  • 09e6654 feat: update error loc of require-yield and no-useless-constructor (#20267) (Tanuj Kanti)

Bug Fixes

  • 436b82f fix: update eslint (#20473) (renovate[bot])
  • 1d29d22 fix: detect default this binding in Array.fromAsync callbacks (#20456) (Francesco Trotta)
  • 727451e fix: fix regression of global mode report range in strict rule (#20462) (ntnyq)
  • e80485f fix: remove fake FlatESLint and LegacyESLint exports (#20460) (Francesco Trotta)
  • 9eeff3b fix: update esquery (#20423) (cryptnix)
  • b34b938 fix: use Error.prepareStackTrace to estimate failing test location (#20436) (Francesco Trotta)
  • 51aab53 fix: update eslint (#20443) (renovate[bot])
  • 23490b2 fix: handle space before colon in RuleTester location estimation (#20433) (Francesco Trotta)
  • f244dbf fix: use MessagePlaceholderData type from @eslint/core (#20348) (루밀LuMir)
  • d186f8c fix: update eslint (#20427) (renovate[bot])
  • 2332262 fix: error location should not modify error message in RuleTester (#20421) (Milos Djermanovic)
  • ab99b21 fix: ensure filename is passed as third argument to verifyAndFix() (#20405) (루밀LuMir)
  • 8a60f3b fix: remove ecmaVersion and sourceType from ParserOptions type (#20415) (Pixel998)
  • eafd727 fix: remove TDZ scope type (#20231) (jaymarvelz)

... (truncated)

Commits

Updates @types/node from 25.2.0 to 25.2.2

Commits

Updates @types/react from 19.2.11 to 19.2.13

Commits

Updates eslint from 9.39.2 to 10.0.0

Release notes

Sourced from eslint's releases.

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)
  • f0cafe5 feat: rule tester add assertion option requireData (#20409) (fnx)
  • f7ab693 feat: output RuleTester test case failure index (#19976) (ST-DDT)
  • 7cbcbf9 feat: add countThis option to max-params (#20236) (Gerkin)
  • f148a5e feat: add error assertion options (#20247) (ST-DDT)
  • 09e6654 feat: update error loc of require-yield and no-useless-constructor (#20267) (Tanuj Kanti)

Bug Fixes

  • 436b82f fix: update eslint (#20473) (renovate[bot])
  • 1d29d22 fix: detect default this binding in Array.fromAsync callbacks (#20456) (Francesco Trotta)
  • 727451e fix: fix regression of global mode report range in strict rule (#20462) (ntnyq)
  • e80485f fix: remove fake FlatESLint and LegacyESLint exports (#20460) (Francesco Trotta)
  • 9eeff3b fix: update esquery (#20423) (cryptnix)
  • b34b938 fix: use Error.prepareStackTrace to estimate failing test location (#20436) (Francesco Trotta)
  • 51aab53 fix: update eslint (#20443) (renovate[bot])
  • 23490b2 fix: handle space before colon in RuleTester location estimation (#20433) (Francesco Trotta)
  • f244dbf fix: use MessagePlaceholderData type from @eslint/core (#20348) (루밀LuMir)
  • d186f8c fix: update eslint (#20427) (renovate[bot])
  • 2332262 fix: error location should not modify error message in RuleTester (#20421) (Milos Djermanovic)
  • ab99b21 fix: ensure filename is passed as third argument to verifyAndFix() (#20405) (루밀LuMir)
  • 8a60f3b fix: remove ecmaVersion and sourceType from ParserOptions type (#20415) (Pixel998)
  • eafd727 fix: remove TDZ scope type (#20231) (jaymarvelz)

... (truncated)

Commits
  • 4e6c4ac 10.0.0
  • ddd8a22 Build: changelog update for 10.0.0
  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457)
  • 1ece282 chore: ignore /docs/v9.x in link checker (#20452)
  • 034e139 ci: add type integration test for @html-eslint/eslint-plugin (#20345)
  • f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
  • e978dda docs: Update README
  • 4cecf83 docs: Update README
  • c79f0ab docs: Update README
  • afc0681 chore: remove scopeManager.addGlobals patch for typescript-eslint parser (#20...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend-npm-dependencies group in /frontend with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@fortawesome/react-fontawesome](https://github.com/FortAwesome/react-fontawesome) | `3.1.1` | `3.2.0` |
| [@turf/turf](https://github.com/Turfjs/turf) | `7.3.3` | `7.3.4` |
| [axios](https://github.com/axios/axios) | `1.13.4` | `1.13.5` |
| [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `5.2.16` | `5.2.17` |
| [motion](https://github.com/motiondivision/motion) | `12.31.0` | `12.33.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.2` | `10.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.0` | `25.2.2` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.11` | `19.2.13` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.0.0` |


Updates `@fortawesome/react-fontawesome` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/FortAwesome/react-fontawesome/releases)
- [Changelog](https://github.com/FortAwesome/react-fontawesome/blob/main/CHANGELOG.md)
- [Commits](FortAwesome/react-fontawesome@v3.1.1...v3.2.0)

Updates `@turf/turf` from 7.3.3 to 7.3.4
- [Release notes](https://github.com/Turfjs/turf/releases)
- [Changelog](https://github.com/Turfjs/turf/blob/master/CHANGELOG.md)
- [Commits](Turfjs/turf@v7.3.3...v7.3.4)

Updates `axios` from 1.13.4 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.4...v1.13.5)

Updates `html-react-parser` from 5.2.16 to 5.2.17
- [Release notes](https://github.com/remarkablemark/html-react-parser/releases)
- [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md)
- [Commits](remarkablemark/html-react-parser@v5.2.16...v5.2.17)

Updates `motion` from 12.31.0 to 12.33.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.31.0...v12.33.0)

Updates `@eslint/js` from 9.39.2 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/HEAD/packages/js)

Updates `@types/node` from 25.2.0 to 25.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.11 to 19.2.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `eslint` from 9.39.2 to 10.0.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.0.0)

---
updated-dependencies:
- dependency-name: "@fortawesome/react-fontawesome"
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-npm-dependencies
- dependency-name: "@turf/turf"
  dependency-version: 7.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-npm-dependencies
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-npm-dependencies
- dependency-name: html-react-parser
  dependency-version: 5.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-npm-dependencies
- dependency-name: motion
  dependency-version: 12.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-npm-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-npm-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-npm-dependencies
- dependency-name: eslint
  dependency-version: 10.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 9, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 9, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/frontend/frontend-npm-dependencies-a738a587bb branch February 9, 2026 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants