Skip to content

frontend: bump the frontend-dependencies group in /frontend with 20 updates - #145

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/frontend/dev/frontend-dependencies-68fd8d52fe
Closed

frontend: bump the frontend-dependencies group in /frontend with 20 updates#145
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/frontend/dev/frontend-dependencies-68fd8d52fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-dependencies group in /frontend with 20 updates:

Package From To
@mantine/core 7.15.2 7.17.8
@mantine/form 7.15.2 7.17.8
@mantine/hooks 7.15.2 7.17.8
@tabler/icons-react 3.26.0 3.46.0
@eslint/js 9.39.4 10.0.1
@testing-library/jest-dom 6.9.1 7.0.0
@testing-library/react 16.3.0 16.3.2
@types/node 22.20.0 26.1.2
@vitejs/plugin-react 4.3.4 6.0.5
eslint 9.39.4 10.8.0
eslint-plugin-react-hooks 5.1.0 7.1.1
eslint-plugin-react-refresh 0.4.16 0.5.3
globals 15.14.0 17.8.0
jsdom 26.1.0 30.0.1
postcss-preset-mantine 1.17.0 1.18.0
prettier 3.4.2 3.9.6
typescript 5.7.2 7.0.2
typescript-eslint 8.19.0 8.65.0
vite 6.4.3 8.2.0
vitest 3.2.7 4.1.10

Updates @mantine/core from 7.15.2 to 7.17.8

Release notes

Sourced from @​mantine/core's releases.

7.17.8

What's Changed

  • [@mantine/hooks] use-idle: Fix timeout not being cancelled when the parent component unmounts (#7914)
  • [@mantine/core] Collapse: Fix inert attribute being incompatible with React 18 (#7911)
  • [@mantine/core] Overlay: Fix blur not working in older browsers (#7907)
  • [@mantine/core] Fix toRgba function incorrectly handling values with zero transparency (#7906)
  • [@mantine/core] ScrollArea: Fix onBottomReached not being called when the container size has sub-pixel value
  • [@mantine/form] Fix form.reorderItem reordering only the first item (#7892)
  • [@mantine/core] Popover: Fix onOpen/onClose being called when disabled prop is set (#7868)
  • [@mantine/spotlight] Fix labels containing single quote passed to Spotlight.ActionGroup not working (#7865)
  • [@mantine/core] Collapse: Fix inert prop not being compatible with React 18 (#7864)
  • [@mantine/core] List: Fix incorrect types when type="unordered" (#7861)
  • [@mantine/core] AngleSlider: Fix incorrect arrow events handling (#7862)
  • [@mantine/dates] DateInput: Fix Escape key not closing dropdown (#7857)
  • [@mantine/hooks] use-shallow-effect: Fix NaN value not being handled correctly (#7851)
  • [@mantine/core] MutltiSelect: Fix onPaste prop not being passed to the input element (#7838)
  • [@mantine/core] Button: Fix FileButton breaking Button.Group styles (#7835)
  • [@mantine/core] Modal Fix incorrect header styles with ScrollArea (#7832)
  • [@mantine/dropzone] Fix status being stuck in rejected state when a file with incorrect mime type is dropped
  • [@mantine/core] AngleSlider: Fix incorrect thumb position in RTL layouts (#7822)
  • [@mantine/core] Select: Fix onSearchChange being triggered when controlled search value is updated (#7814)
  • [@mantine/dates] TimeInput: Fix step prop not working (#7811)
  • [@mantine/core] Table: Add scrollAreaProps support to Table.ScrollContainer (#7798)
  • [@mantine/core] Stepper: Fix unexpected bottom spacing in vertical orientation (#7794)
  • [@mantine/core] PasswordInput: Fix aria-describedby not pointing to error and description elements (#7793)
  • [@mantine/core] Switch: Fix div element used inside label (#7776)
  • [@mantine/core] Collapse: Fix children with scale animations not working correctly when collapse is opened (#7774)
  • [@mantine/core] Transition: Fix exitDuration not working correctly for rapid changes (#7773)
  • [@mantine/core] Stepper: Fix inconsistent border color in horizontal/vertical orientation (#7795)

New Contributors

Full Changelog: mantinedev/mantine@8.0.2...7.17.8

7.17.7

What's Changed

  • [@mantine/core] Table: Fix stickyHeader prop having impact on th selector specificity (#7767)
  • [@mantine.core] NumberInput: Fix max prop not reseting value on blur if the value is larger than Number.MAX_SAFE_INTEGER (#7766)
  • [@mantine.hook] use-resize-observer: Fix width/height not being calculated correctly for elements with box-sizing: content-box (#7764)
  • [@mantine/core] NavLink: Fix rightSection={null} not disabling chevron
  • [@mantine.hook] use-hotkeys: Fix usePhysicalKeys option not working with spacial keys (#7761)
  • [@mantine/core] Modal: Fix scrollarea used inside the modal affecting the position of the close button (#7738)
  • [@mantine/core] Select: Fix defined defaultValue being ignored with data updates (#7742)
  • [@mantine/core] ScrollArea: Fix content overflowing the viewport in some cases (#7748)
  • [@mantine/charts] RadarChart: Add tooltip and dots support (#7749)
  • [@mantine/modals] Fix confirmProps not available in updateModal function (#7750)

... (truncated)

Commits
  • 5b98552 [@​mantine/core] Fix toRgba function incorrectly handling values with zero t...
  • f7910a9 [@​mantine/core] Overlay: Fix blur not working in older browsers (#7907)
  • c514d24 [@​mantine/core] Collapse: Fix inert attribute being incompatible with React...
  • b9a4fdc [release] Version: 8.0.2
  • a8ea843 [@​mantine/core] ScrollArea: Fix onBottomReached not being called when the c...
  • 5093c14 [mantine.dev] Fix slate documentation of Menu.Sub default props (#7891)
  • bcfcfd5 [@​mantine/core] Popover: Fix onOpen/onClose being called when disabled ...
  • 42f6cf4 [@​mantine/core] Collapse: Fix inert prop not being compatible with React 18...
  • 53f3a06 [@​mantine/core] List: Fix incorrect types when type="unordered" (#7861)
  • 0d25cd4 [@​mantine/core] AngleSlider: Fix incorrect arrow events handling (#7862)
  • Additional commits viewable in compare view

Updates @mantine/form from 7.15.2 to 7.17.8

Release notes

Sourced from @​mantine/form's releases.

7.17.8

What's Changed

  • [@mantine/hooks] use-idle: Fix timeout not being cancelled when the parent component unmounts (#7914)
  • [@mantine/core] Collapse: Fix inert attribute being incompatible with React 18 (#7911)
  • [@mantine/core] Overlay: Fix blur not working in older browsers (#7907)
  • [@mantine/core] Fix toRgba function incorrectly handling values with zero transparency (#7906)
  • [@mantine/core] ScrollArea: Fix onBottomReached not being called when the container size has sub-pixel value
  • [@mantine/form] Fix form.reorderItem reordering only the first item (#7892)
  • [@mantine/core] Popover: Fix onOpen/onClose being called when disabled prop is set (#7868)
  • [@mantine/spotlight] Fix labels containing single quote passed to Spotlight.ActionGroup not working (#7865)
  • [@mantine/core] Collapse: Fix inert prop not being compatible with React 18 (#7864)
  • [@mantine/core] List: Fix incorrect types when type="unordered" (#7861)
  • [@mantine/core] AngleSlider: Fix incorrect arrow events handling (#7862)
  • [@mantine/dates] DateInput: Fix Escape key not closing dropdown (#7857)
  • [@mantine/hooks] use-shallow-effect: Fix NaN value not being handled correctly (#7851)
  • [@mantine/core] MutltiSelect: Fix onPaste prop not being passed to the input element (#7838)
  • [@mantine/core] Button: Fix FileButton breaking Button.Group styles (#7835)
  • [@mantine/core] Modal Fix incorrect header styles with ScrollArea (#7832)
  • [@mantine/dropzone] Fix status being stuck in rejected state when a file with incorrect mime type is dropped
  • [@mantine/core] AngleSlider: Fix incorrect thumb position in RTL layouts (#7822)
  • [@mantine/core] Select: Fix onSearchChange being triggered when controlled search value is updated (#7814)
  • [@mantine/dates] TimeInput: Fix step prop not working (#7811)
  • [@mantine/core] Table: Add scrollAreaProps support to Table.ScrollContainer (#7798)
  • [@mantine/core] Stepper: Fix unexpected bottom spacing in vertical orientation (#7794)
  • [@mantine/core] PasswordInput: Fix aria-describedby not pointing to error and description elements (#7793)
  • [@mantine/core] Switch: Fix div element used inside label (#7776)
  • [@mantine/core] Collapse: Fix children with scale animations not working correctly when collapse is opened (#7774)
  • [@mantine/core] Transition: Fix exitDuration not working correctly for rapid changes (#7773)
  • [@mantine/core] Stepper: Fix inconsistent border color in horizontal/vertical orientation (#7795)

New Contributors

Full Changelog: mantinedev/mantine@8.0.2...7.17.8

7.17.7

What's Changed

  • [@mantine/core] Table: Fix stickyHeader prop having impact on th selector specificity (#7767)
  • [@mantine.core] NumberInput: Fix max prop not reseting value on blur if the value is larger than Number.MAX_SAFE_INTEGER (#7766)
  • [@mantine.hook] use-resize-observer: Fix width/height not being calculated correctly for elements with box-sizing: content-box (#7764)
  • [@mantine/core] NavLink: Fix rightSection={null} not disabling chevron
  • [@mantine.hook] use-hotkeys: Fix usePhysicalKeys option not working with spacial keys (#7761)
  • [@mantine/core] Modal: Fix scrollarea used inside the modal affecting the position of the close button (#7738)
  • [@mantine/core] Select: Fix defined defaultValue being ignored with data updates (#7742)
  • [@mantine/core] ScrollArea: Fix content overflowing the viewport in some cases (#7748)
  • [@mantine/charts] RadarChart: Add tooltip and dots support (#7749)
  • [@mantine/modals] Fix confirmProps not available in updateModal function (#7750)

... (truncated)

Commits
  • b9a4fdc [release] Version: 8.0.2
  • df2c90a [@​mantine/form] Fix form.reorderItem reordering only the first item (#7892)
  • 6b18e29 [refactor] Add deprecation notice to resolvers exported from @mantine/form ...
  • 57f637d [release] Version: 8.0.1
  • b1997c7 [release] Version: 8.0.0
  • 7bc3344 Merge branch master into 8.0
  • a3b5452 [release] Version: 7.17.5
  • 1526191 [@​mantine/form] Add form.getInitialValues handler
  • fc94243 [release] Version: 8.0.0-alpha.3
  • 5c80395 Merge branch 'master' of github.com:mantinedev/mantine into 8.0
  • Additional commits viewable in compare view

Updates @mantine/hooks from 7.15.2 to 7.17.8

Release notes

Sourced from @​mantine/hooks's releases.

7.17.8

What's Changed

  • [@mantine/hooks] use-idle: Fix timeout not being cancelled when the parent component unmounts (#7914)
  • [@mantine/core] Collapse: Fix inert attribute being incompatible with React 18 (#7911)
  • [@mantine/core] Overlay: Fix blur not working in older browsers (#7907)
  • [@mantine/core] Fix toRgba function incorrectly handling values with zero transparency (#7906)
  • [@mantine/core] ScrollArea: Fix onBottomReached not being called when the container size has sub-pixel value
  • [@mantine/form] Fix form.reorderItem reordering only the first item (#7892)
  • [@mantine/core] Popover: Fix onOpen/onClose being called when disabled prop is set (#7868)
  • [@mantine/spotlight] Fix labels containing single quote passed to Spotlight.ActionGroup not working (#7865)
  • [@mantine/core] Collapse: Fix inert prop not being compatible with React 18 (#7864)
  • [@mantine/core] List: Fix incorrect types when type="unordered" (#7861)
  • [@mantine/core] AngleSlider: Fix incorrect arrow events handling (#7862)
  • [@mantine/dates] DateInput: Fix Escape key not closing dropdown (#7857)
  • [@mantine/hooks] use-shallow-effect: Fix NaN value not being handled correctly (#7851)
  • [@mantine/core] MutltiSelect: Fix onPaste prop not being passed to the input element (#7838)
  • [@mantine/core] Button: Fix FileButton breaking Button.Group styles (#7835)
  • [@mantine/core] Modal Fix incorrect header styles with ScrollArea (#7832)
  • [@mantine/dropzone] Fix status being stuck in rejected state when a file with incorrect mime type is dropped
  • [@mantine/core] AngleSlider: Fix incorrect thumb position in RTL layouts (#7822)
  • [@mantine/core] Select: Fix onSearchChange being triggered when controlled search value is updated (#7814)
  • [@mantine/dates] TimeInput: Fix step prop not working (#7811)
  • [@mantine/core] Table: Add scrollAreaProps support to Table.ScrollContainer (#7798)
  • [@mantine/core] Stepper: Fix unexpected bottom spacing in vertical orientation (#7794)
  • [@mantine/core] PasswordInput: Fix aria-describedby not pointing to error and description elements (#7793)
  • [@mantine/core] Switch: Fix div element used inside label (#7776)
  • [@mantine/core] Collapse: Fix children with scale animations not working correctly when collapse is opened (#7774)
  • [@mantine/core] Transition: Fix exitDuration not working correctly for rapid changes (#7773)
  • [@mantine/core] Stepper: Fix inconsistent border color in horizontal/vertical orientation (#7795)

New Contributors

Full Changelog: mantinedev/mantine@8.0.2...7.17.8

7.17.7

What's Changed

  • [@mantine/core] Table: Fix stickyHeader prop having impact on th selector specificity (#7767)
  • [@mantine.core] NumberInput: Fix max prop not reseting value on blur if the value is larger than Number.MAX_SAFE_INTEGER (#7766)
  • [@mantine.hook] use-resize-observer: Fix width/height not being calculated correctly for elements with box-sizing: content-box (#7764)
  • [@mantine/core] NavLink: Fix rightSection={null} not disabling chevron
  • [@mantine.hook] use-hotkeys: Fix usePhysicalKeys option not working with spacial keys (#7761)
  • [@mantine/core] Modal: Fix scrollarea used inside the modal affecting the position of the close button (#7738)
  • [@mantine/core] Select: Fix defined defaultValue being ignored with data updates (#7742)
  • [@mantine/core] ScrollArea: Fix content overflowing the viewport in some cases (#7748)
  • [@mantine/charts] RadarChart: Add tooltip and dots support (#7749)
  • [@mantine/modals] Fix confirmProps not available in updateModal function (#7750)

... (truncated)

Commits
  • fe4603b [@​mantine/hooks] use-idle: Fix timeout not being cancelled when the parent co...
  • b9a4fdc [release] Version: 8.0.2
  • 348e9e8 [@​mantine/hooks] use-local-storage: Add queueMicrotask for dispatching upda...
  • 704cbf7 [@​mantine/hooks] use-shallow-effect: Fix NaN value not being handled correc...
  • 57f637d [release] Version: 8.0.1
  • e1823ab [@​mantine/hooks] use-debounced-callback: Add leading: true option support (...
  • b1997c7 [release] Version: 8.0.0
  • 7d60c36 Merge branch master into 8.0
  • dc693f7 [release] Version: 7.17.7
  • ec2c45d [@​mantine/hooks] Fix #7772
  • Additional commits viewable in compare view

Updates @tabler/icons-react from 3.26.0 to 3.46.0

Release notes

Sourced from @​tabler/icons-react's releases.

Release 3.46.0

18 new icons:

  • outline/play-bug
  • outline/play-bugs
  • outline/remote-control
  • outline/rocking-chair
  • outline/run-sprint
  • outline/sparkles-2-off
  • outline/tabs
  • outline/tags-chevron-down
  • outline/tags-chevron-left
  • outline/tags-chevron-right
  • outline/tags-chevron-up
  • outline/thinking-high
  • outline/thinking-low
  • outline/thinking-medium
  • outline/treasure-chest
  • outline/twig
  • outline/vault
  • outline/yarn

Fixed icons: outline/credits, outline/currency-tether, outline/device-3d-camera, outline/device-screen, outline/home-lock, outline/map-lock, outline/notdef, outline/queue-pop-in, outline/server-bolt, outline/server, outline/sparkles-2, outline/transform-point-bottom-left, outline/transform-point-bottom-right, outline/transform-point-top-left, outline/transform-point-top-right

Release 3.45.0

20 new icons:

  • filled/brand-signal
  • outline/app-window-bottom-left
  • outline/app-window-bottom-right
  • outline/app-window-bottom
  • outline/app-window-center
  • outline/arrow-fork-triple
  • outline/brand-signal
  • outline/device-vision-pro-wifi
  • outline/device-workstation
  • outline/dragon
  • outline/italic-off
  • outline/tab-close
  • outline/text-outline
  • outline/text-regex-asterisk
  • outline/text-regex-end
  • outline/text-regex-plus
  • outline/text-regex-question
  • outline/text-regex-start
  • outline/underline-off

... (truncated)

Commits
  • 8ac7d81 Release 3.46.0
  • fe319f0 Add publishConfig for public access in all icon packages (#1562)
  • 975920f Release 3.45.0
  • 4a4b287 Add Astro support for Tabler Icons (#1559)
  • 6d128ed Release 3.44.0
  • e40738b Release 3.43.0
  • 076f4a9 Release 3.42.0
  • 9b27b65 Release 3.41.1
  • ebad60b Update homepage links in documentation and package files to point to the new ...
  • 8ed617b Update README files to wrap images in anchor tags linking to the Tabler Icons...
  • Additional commits viewable in compare view

Updates @eslint/js from 9.39.4 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

  • c87d5bd fix: update eslint (#20531) (renovate[bot])
  • d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
  • 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
  • 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

  • e5c281f chore: updates for v9.39.3 release (Jenkins)
  • 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
  • 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
  • 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
  • da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
  • 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

  • f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
  • a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
  • c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
  • fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
  • 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
  • 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
  • ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
  • 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
  • c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
  • 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
  • a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
  • a89059d feat!: Program range span entire source text (#20133) (Pixel998)
  • 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
  • f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
  • aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
  • f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
  • 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
  • 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
  • 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
  • 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
  • f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

  • bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
  • 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
  • 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits
  • 84fb885 chore: package.json update for @​eslint/js release
  • 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
  • f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
  • b4b3127 chore: package.json update for @​eslint/js release
  • 0b14059 chore: package.json update for @​eslint/js release
  • fa31a60 feat!: add name to configs (#20015)
  • 1e2cad5 chore: package.json update for @​eslint/js release
  • 454a292 feat!: update eslint:recommended configuration (#20210)
  • c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
  • See full diff in compare view

Updates @testing-library/jest-dom from 6.9.1 to 7.0.0

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.0

7.0.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

  • @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)
Commits
  • 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
  • cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
  • 55c07ce ci: switch release to npm trusted publishing (#726)
  • 213256f docs: move toHaveSelection from the deprecated section (#717)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.


Updates @testing-library/react from 16.3.0 to 16.3.2

Release notes

Sourced from @​testing-library/react's releases.

v16.3.2

16.3.2 (2026-01-19)

Bug Fixes

  • Update 'onCaughtError' type inference in 'RenderOptions' to work with React v19 (#1438) (f32bd1b)

v16.3.1

16.3.1 (2025-12-15)

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/react since your current version.


Updates @types/node from 22.20.0 to 26.1.2

Commits

Updates @vitejs/plugin-react from 4.3.4 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

plugin-react@6.0.3

No release notes provided.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30...

Description has been truncated

Bumps the frontend-dependencies group in /frontend with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [@mantine/core](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/core) | `7.15.2` | `7.17.8` |
| [@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form) | `7.15.2` | `7.17.8` |
| [@mantine/hooks](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/hooks) | `7.15.2` | `7.17.8` |
| [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) | `3.26.0` | `3.46.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.0` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.0` | `26.1.2` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.3.4` | `6.0.5` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.8.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.1.0` | `7.1.1` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.16` | `0.5.3` |
| [globals](https://github.com/sindresorhus/globals) | `15.14.0` | `17.8.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.0.1` |
| [postcss-preset-mantine](https://github.com/mantinedev/postcss-preset-mantine) | `1.17.0` | `1.18.0` |
| [prettier](https://github.com/prettier/prettier) | `3.4.2` | `3.9.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.7.2` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.19.0` | `8.65.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.2.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.7` | `4.1.10` |


Updates `@mantine/core` from 7.15.2 to 7.17.8
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/7.17.8/packages/@mantine/core)

Updates `@mantine/form` from 7.15.2 to 7.17.8
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/7.17.8/packages/@mantine/form)

Updates `@mantine/hooks` from 7.15.2 to 7.17.8
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/7.17.8/packages/@mantine/hooks)

Updates `@tabler/icons-react` from 3.26.0 to 3.46.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Commits](https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react)

Updates `@eslint/js` from 9.39.4 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.0
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.0)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.0...v16.3.2)

Updates `@types/node` from 22.20.0 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 4.3.4 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `eslint` from 9.39.4 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.8.0)

Updates `eslint-plugin-react-hooks` from 5.1.0 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `eslint-plugin-react-refresh` from 0.4.16 to 0.5.3
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.16...v0.5.3)

Updates `globals` from 15.14.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.14.0...v17.8.0)

Updates `jsdom` from 26.1.0 to 30.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v30.0.1)

Updates `postcss-preset-mantine` from 1.17.0 to 1.18.0
- [Commits](https://github.com/mantinedev/postcss-preset-mantine/commits)

Updates `prettier` from 3.4.2 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.4.2...3.9.6)

Updates `typescript` from 5.7.2 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `typescript-eslint` from 8.19.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint)

Updates `vite` from 6.4.3 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

Updates `vitest` from 3.2.7 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@mantine/core"
  dependency-version: 7.17.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: "@mantine/form"
  dependency-version: 7.17.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: "@mantine/hooks"
  dependency-version: 7.17.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: "@tabler/icons-react"
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: postcss-preset-mantine
  dependency-version: 1.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from tyler-rich as a code owner August 3, 2026 07:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
tyler-rich added a commit that referenced this pull request Aug 3, 2026
…147)

* backend: bump fastapi to 0.141.1 and uvicorn to 0.52.0

Applies the runtime bumps proposed by the post-v0.3.0 Dependabot group PR
(#144) and regenerates the hash-pinned lockfile, which Dependabot does not
do — its branch edits pyproject.toml only and so fails CI's drift gate.

FastAPI 0.141.x adds an app.frontend() dev-server convenience that Scrye
does not use; no routing, dependency-injection or response-model behaviour
changes. uvicorn 0.52.0 adds an opt-in experimental --http zttp parser that
upstream marks not-for-production; docker/entrypoint.sh passes no --http
flag, so the default parser selection is unchanged.

starlette holds at 1.3.1 — the pin carried for CVE-2025-62727 /
CVE-2026-48818 / CVE-2026-54283 — confirming FastAPI 0.141.1 still accepts
it. ruff moves 0.16.0 -> 0.16.1 in the dev extra.

Lock regenerated with the pinned uv 0.8.17 command from CONTRIBUTING.md
§ Backend dependency lock; the diff is those two packages and their hashes.

* ci: re-pin codeql-action to the commit behind v4.37.4

Dependabot (#146) proposed moving github/codeql-action/init and .../analyze
from ea14db8 to f205ea1 while leaving the trailing comment at v4.37.4. That
is not a mislabelled bump — resolving the tag upstream shows both SHAs are
the same release:

  ea14db8afdef5d462e69d78c4ca45002d4522418  refs/tags/v4.37.4
  f205ea1c3313d32999d8d6a48b4f6530d4437b38  refs/tags/v4.37.4^{}

codeql-action publishes annotated tags, so the old pin named the tag OBJECT
and the new one names the commit it dereferences to. The advanced-setup
migration pinned the tag object; a SHA-pin is meant to name an immutable
commit, which is what every other action pinned here already does — the
rest publish lightweight tags, where refs/tags/vX is the commit, which is
why this is the only ref affected.

No functional change: same release, same CodeQL bundle (2.26.2), same
security-extended suite. The old pin worked — Actions dereferences a tag
object — so this is pin correctness, not a fix for a broken workflow.

* frontend: apply the routine bumps from the post-v0.3.0 dependency group

Takes 8 of the 20 updates Dependabot proposed in #145 and narrows a 9th.
The Mantine/React ignores held — the PR proposed no locked major, and
@mantine/* moved 7.15.2 -> 7.17.8, a minor inside v7.

Applied: @mantine/core/form/hooks 7.17.8, @tabler/icons-react 3.46.0,
@testing-library/react 16.3.2, @testing-library/jest-dom 7.0.0,
postcss-preset-mantine 1.18.0, globals 17.8.0, prettier 3.9.6.

The two majors were checked rather than waved through. jest-dom 7 requires
@testing-library/dom as a peer (already a direct devDependency at 10.4.1)
and Node >= 22 (CI is on 24); it removes no matchers. globals 17 feeds
eslint.config.js's globals.browser, where a shrunken set would leave lint
passing while losing coverage — the set was inspected: 1191 entries, with
window/document/fetch present.

@types/node is narrowed from the proposed 26.1.2 to 24.13.3. Its major
tracks Node's, and the SPA builds on Node 24; tsconfig.node.json sets
types: [node], so types ahead of the pinned runtime describe APIs the build
does not have and feed them into the type-aware ESLint gate — the same
failure mode that put @types/react* in the ignore list.

Prettier 3.9 collapses short union types onto one line instead of the
leading-| form, which is the whitespace-only change to three source files.

Held back: typescript 7, eslint 10, @eslint/js 10, typescript-eslint 8.65,
vite 8, @vitejs/plugin-react 6, vitest 4, jsdom 30,
eslint-plugin-react-hooks 7 and eslint-plugin-react-refresh 0.5 — the
deferred #86 toolchain sweep, which lands on the type-aware ESLint gate and
is its own scoped work.

* ci: decline @types/node majors against the pinned Node 24

@types/node's major tracks Node's, and this repo builds and runs on Node 24
(the Dockerfile builder stage and ci.yml's node-version), with Node majors
already declined for the docker ecosystem on a support-lifecycle argument.
tsconfig.node.json sets types: [node], so a @types/node ahead of the pinned
runtime feeds APIs the build does not have into the type-aware ESLint gate
— the same reason @types/react* are majors-locked.

Without this, #145's @types/node 26 returns inside the grouped PR every
week. The comment also records what is deliberately NOT ignored: the
frontend toolchain majors are wanted work tracked in docs/ROADMAP.md and
should keep being surfaced.

* docs: log the post-v0.3.0 Dependabot triage

Adds the dated ARCHIVE.md §14 entry covering all three grouped PRs (#144,
#145, #146) — the base-branch check, the changelog findings, the annotated-
tag SHA-pin discovery, the applied/narrowed/held split on the frontend, and
the verification evidence. Refreshes the ROADMAP #86 sweep list to the
versions #145 surfaced and adds the four members that were not on the
original list. Records the bumps under CHANGELOG's Unreleased § Changed.
@tyler-rich

Copy link
Copy Markdown
Owner

Superseded by #147, which applies the 8 routine bumps, narrows @types/node 26 -> 24 to match the pinned Node 24, and holds the 10 toolchain majors for the deferred #86 sweep.

@tyler-rich tyler-rich closed this Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/dev/frontend-dependencies-68fd8d52fe branch August 3, 2026 08:19
tyler-rich added a commit that referenced this pull request Aug 8, 2026
…A + Track B)

Replaces docs/ROADMAP.md wholesale with an externally-drafted revision. The
previous document becomes Track A — Engineering & hardening, carried across
verbatim; Track B — Features is new, covering six phases plus a Deferred list,
an out-of-scope policy list, a licensing & bundling policy table, and the
guiding principles. Known limitations & accepted trade-offs is unchanged.

Track A's only substantive edits are three † prerequisite markers, on the items
that gate a Track B feature: content-addressed SBOM identity (Phase 2
fix-watch), cancel a running scan (endpoint-scanning target class), and the
generated API client (Phase 4 MCP server).

Track A and Known limitations were diffed line by line against the outgoing
file before replacing, and every §14 pointer was re-checked against the entry
it names rather than against its presence in the old file. One regression was
caught: the draft's "Frontend tooling majors from Dependabot #86" paragraph
predated 004d2b5 (#147), so taking it as written would have reverted the #145
shopping-list refresh, dropped four toolchain members, reverted jsdom 26 -> 30
to 26 -> 29, and removed the sentence that mirrors dependabot.yml's
"Deliberately NOT ignored" comment. The current paragraph is spliced in
verbatim.

See docs/ARCHIVE.md § Deviations for the full verification record.
tyler-rich added a commit that referenced this pull request Aug 8, 2026
…A + Track B) (#155)

* docs(roadmap): replace ROADMAP.md with the two-track revision (Track A + Track B)

Replaces docs/ROADMAP.md wholesale with an externally-drafted revision. The
previous document becomes Track A — Engineering & hardening, carried across
verbatim; Track B — Features is new, covering six phases plus a Deferred list,
an out-of-scope policy list, a licensing & bundling policy table, and the
guiding principles. Known limitations & accepted trade-offs is unchanged.

Track A's only substantive edits are three † prerequisite markers, on the items
that gate a Track B feature: content-addressed SBOM identity (Phase 2
fix-watch), cancel a running scan (endpoint-scanning target class), and the
generated API client (Phase 4 MCP server).

Track A and Known limitations were diffed line by line against the outgoing
file before replacing, and every §14 pointer was re-checked against the entry
it names rather than against its presence in the old file. One regression was
caught: the draft's "Frontend tooling majors from Dependabot #86" paragraph
predated 004d2b5 (#147), so taking it as written would have reverted the #145
shopping-list refresh, dropped four toolchain members, reverted jsdom 26 -> 30
to 26 -> 29, and removed the sentence that mirrors dependabot.yml's
"Deliberately NOT ignored" comment. The current paragraph is spliced in
verbatim.

See docs/ARCHIVE.md § Deviations for the full verification record.

* docs(archive): link the ROADMAP replacement deviation entry to its PR
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant