chore(deps): bump the frontend-dependencies group across 1 directory with 21 updates by dependabot[bot] · Pull Request #57 · Internet2/i2ccc

dependabot · 2026-10-13T22:35:55Z

Bumps the frontend-dependencies group with 21 updates in the /frontend directory:

Package	From	To
@radix-ui/react-hover-card	`1.1.23`	`1.1.24`
@radix-ui/react-tooltip	`1.2.16`	`1.3.0`
autoprefixer	`10.5.4`	`10.6.1`
axios	`1.19.0`	`1.20.0`
driver.js	`1.8.0`	`1.9.0`
lucide-react	`1.31.0`	`1.55.0`
postcss	`8.5.26`	`8.5.29`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
react-hot-toast	`2.6.0`	`2.6.1`
react-router-dom	`7.18.2`	`7.18.4`
@types/node	`26.2.0`	`26.6.5`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
@vitejs/plugin-react	`6.0.5`	`6.1.2`
eslint	`10.8.1`	`10.12.0`
eslint-plugin-react-refresh	`0.5.4`	`0.5.7`
globals	`17.11.0`	`17.13.0`
js-yaml	`5.3.0`	`5.4.3`
typescript-eslint	`8.67.0`	`8.71.1`
vite	`8.2.1`	`8.3.4`

Updates @radix-ui/react-hover-card from 1.1.23 to 1.1.24

Changelog

Sourced from @radix-ui/react-hover-card's changelog.

1.1.24

Fixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped FocusScope reclaimed focus, and its RemoveScroll only allowed scrolling within the modal content.

Updated dependencies: @radix-ui/react-focus-scope@1.2.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-popper@1.3.8, @radix-ui/react-portal@1.1.18

Commits

See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.16 to 1.3.0

Changelog

Sourced from @radix-ui/react-tooltip's changelog.

1.3.0

Added support for multiple aria-describedby attributes.

Updated dependencies: @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-visually-hidden@1.2.12, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-popper@1.3.8, @radix-ui/react-portal@1.1.18

Commits

See full diff in compare view

Updates autoprefixer from 10.5.4 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Changelog

Sourced from autoprefixer's changelog.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Commits

c99614d Release 10.6.1 version
f1d08cb Update dependencies
cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
e1212dc Release 10.6.0 version
dac3c5f Add support for prefixing initial-letter (#1556)
b031690 Release 10.5.6 version
da65c36 Add warning when Autoprefixer can cover CSS for old Safari
604f8d9 Update dependencies
54608ca Fix old WebKit gradients with color hints (#1554)
7e81fff Release 10.5.5 version
Additional commits viewable in compare view

Updates axios from 1.19.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)

Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)

XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)

Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)

Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)

Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)

Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)

CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@yens1 (#11109)

@Sasireddy001 (#11113)

@ari-token-security (#11094)

@timothyokooboh (#11097)

@gi9439041-png (#11119)

@Hashim1999164 (#11082)

@v-dev-cl (#11091)

@r0h1tb (#11118)

@ostapondo (#11121)

Full Changelog (axios/axios@v1.19.0...v1.20.0)

Changelog

Sourced from axios's changelog.

Changelog

Commits

84a9f3b chore(release): prepare release 1.20.0 (#11152)
e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
d19040b fix: harden runtime option handling (#11141)
e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
ba98559 docs: add ScrapingBee sponsor (#11137)
Additional commits viewable in compare view

Updates driver.js from 1.8.0 to 1.9.0

Release notes

Sourced from driver.js's releases.

1.9.0

Added

closeBtnLabel (driver and step level) to set the close button's aria-label, for translated tours. Defaults to Close. (#623)

overlayClickBehavior: "none" to ignore overlay clicks while Escape and the close button still close the tour. (#435)

Changed

Keyboard control follows the popover buttons: arrow keys do nothing when their button is hidden or disabled, and Escape does nothing when the close button is disabled. (#589)

The current popover is hidden while waitForElement waits for the next step's element, so a stale step no longer stays on screen. (#578)

Only one instance is on screen at a time. Starting a tour or highlight closes any other active instance; it gets onDeselected and onDestroyed but not onDestroyStarted.

Fixed

destroy() on an instance that is not active is now a no-op instead of tearing down another instance's tour. (#504)

The highlighted element's own aria-controls, aria-expanded and aria-haspopup are restored when the highlight moves on or the tour ends, instead of being removed. (#495)

No more small white square between steps without an element. (#549)

onDeselected now fires when moving between two steps on the same element, or between two steps without an element.

The driver-level disableButtons now applies to tour steps. It used to be ignored during a tour. A step's own disableButtons still replaces it.

Commits

cc39804 1.9.0
d7ccdd0 Apply global disableButtons to tour steps
bda4190 Hide the popover while waiting for an element
758a563 Add none option to overlayClickBehavior
addb8f5 Make keyboard control follow the buttons
15cd79e Fire onDeselected when the step changes
d19768a Remove stage gap on steps without an element
2a30339 Restore aria attributes after a highlight
4dff1b9 Make close button label configurable
ed09b81 Close the active instance when another starts
Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.55.0

Release notes

Sourced from lucide-react's releases.

Version 1.55.0

What's Changed

feat(icons): added mail-dot icon by @elenakovelskikh in lucide-icons/lucide#3230

ci(lint): split lint jobs and annotate Prettier and JSON schema errors in PRs by @ericfennis in lucide-icons/lucide#4982

chore(deps-dev): bump sharp from 0.35.4 to 0.35.5 by @dependabot[bot] in lucide-icons/lucide#4987

chore(deps): bump next from 16.3.6 to 16.3.8 by @dependabot[bot] in lucide-icons/lucide#4988

test(lucide): add tests for empty icons error and DocumentFragment root in createIcons by @grzdev in lucide-icons/lucide#4967

feat(icons): added phone-log icon by @Levi-Bensley in lucide-icons/lucide#3598

chore(copilot-instruction): Adjust instruction text to allow more then 4 use-cases by @ericfennis in lucide-icons/lucide#4989

feat(icons): added wifi-lock icon by @benhaube in lucide-icons/lucide#4913

feat(icons): Add handle-bottom-right icon by @ocavue in lucide-icons/lucide#1793

test(lucide-react): add tests for DynamicIcon fallback and ref forwarding by @grzdev in lucide-icons/lucide#4966

feat(icons): added screw icon by @edik17 in lucide-icons/lucide#4932

feat(icons): added user-round-star icon by @karsa-mistmere in lucide-icons/lucide#3469

feat(icons): added shield-house icon by @benhaube in lucide-icons/lucide#4602

New Contributors

@grzdev made their first contribution in lucide-icons/lucide#4967

@Levi-Bensley made their first contribution in lucide-icons/lucide#3598

@edik17 made their first contribution in lucide-icons/lucide#4932

Full Changelog: lucide-icons/lucide@1.54.0...1.55.0

Version 1.54.0

What's Changed

feat(icons): added lens icon by @rrod497 in lucide-icons/lucide#4923

Full Changelog: lucide-icons/lucide@1.53.0...1.54.0

Version 1.53.0

What's Changed

chore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps group by @dependabot[bot] in lucide-icons/lucide#4961

chore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by @dependabot[bot] in lucide-icons/lucide#4958

fix(site): Fix reset button and rename absolute stroke width to non-scaling stroke by @ericfennis in lucide-icons/lucide#4956

chore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by @dependabot[bot] in lucide-icons/lucide#4968

chore(deps-dev): bump the angular-deps group across 1 directory with 11 updates by @dependabot[bot] in lucide-icons/lucide#4960

chore(categories): Add description field to categories by @ericfennis in lucide-icons/lucide#4909

feat(icons): added groceries icon by @rrod497 in lucide-icons/lucide#4907

fix(icons): changed pen-tool icon by @karsa-mistmere in lucide-icons/lucide#4972

feat(icons): added new hiking-stick icon by @kamilasw in lucide-icons/lucide#4711

feat(icons): added scratch-blocks icon by @mc20000-01 in lucide-icons/lucide#4969

fix(icons): changed soup and salad icons by @karsa-mistmere in lucide-icons/lucide#4971

New Contributors

@mc20000-01 made their first contribution in lucide-icons/lucide#4969

Full Changelog: lucide-icons/lucide@1.52.0...1.53.0

Version 1.52.0

... (truncated)

Commits

949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
See full diff in compare view

Updates postcss from 8.5.26 to 8.5.29

Release notes

Sourced from postcss's releases.

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Commits

a7a1f34 Release 8.5.29 version
b55a36d Update dependencies
7647a81 Escape </style> in output of non-Root nodes (#2163)
7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
ebffa97 Add postcss-smooth-corners plugin
57d6401 Speed up source map cleaning
7e46a03 Speed up parser
7f5c417 Improve </style> protection for the case when beffore nodes have different parts
7ba9051 Fix useless ESLint warning
12b4161 Update dependencies
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166,

…with 21 updates Bumps the frontend-dependencies group with 21 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.23` | `1.1.24` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.3.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` | | [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` | | [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) | `1.8.0` | `1.9.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.55.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.29` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.5` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.2` | | [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.12.0` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.4` | `0.5.7` | | [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.3.0` | `5.4.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.71.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.4` | Updates `@radix-ui/react-hover-card` from 1.1.23 to 1.1.24 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card) Updates `@radix-ui/react-tooltip` from 1.2.16 to 1.3.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `autoprefixer` from 10.5.4 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.4...10.6.1) Updates `axios` from 1.19.0 to 1.20.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.19.0...v1.20.0) Updates `driver.js` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/nilbuild/driver.js/releases) - [Commits](https://github.com/nilbuild/driver.js/commits/1.9.0/packages/driver) Updates `lucide-react` from 1.31.0 to 1.55.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.55.0/packages/lucide-react) Updates `postcss` from 8.5.26 to 8.5.29 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.29) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hot-toast` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/timolins/react-hot-toast/releases) - [Commits](timolins/react-hot-toast@v2.6.0...v2.6.1) Updates `react-router-dom` from 7.18.2 to 7.18.4 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom) Updates `@types/node` from 26.2.0 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `eslint` from 10.8.1 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.1...v10.12.0) Updates `eslint-plugin-react-refresh` from 0.5.4 to 0.5.7 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.4...v0.5.7) Updates `globals` from 17.11.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.11.0...v17.13.0) Updates `js-yaml` from 5.3.0 to 5.4.3 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.3.0...5.4.3) Updates `typescript-eslint` from 8.67.0 to 8.71.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint) Updates `vite` from 8.2.1 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) --- updated-dependencies: - dependency-name: "@radix-ui/react-hover-card" dependency-version: 1.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: axios dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: driver.js dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: lucide-react dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: postcss dependency-version: 8.5.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: react-hot-toast dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: react-router-dom dependency-version: 7.18.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: js-yaml dependency-version: 5.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: typescript-eslint dependency-version: 8.71.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-19T17:46:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies frontend labels Oct 13, 2026

github-actions Bot added the config label Oct 13, 2026

dependabot Bot closed this Oct 19, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/frontend/frontend-dependencies-62334a4b8c branch October 19, 2026 17:46

Navigation Menu

Repository navigation

chore(deps): bump the frontend-dependencies group across 1 directory with 21 updates - #57

chore(deps): bump the frontend-dependencies group across 1 directory with 21 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-dependencies-62334a4b8c

dependabot Bot commented on behalf of github Oct 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.1.24

1.3.0

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

v1.20.0 — August 19, 2026

⚠️ Breaking Changes & Deprecations

🔒 Security Fixes

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

1.9.0

Added

Changed

Fixed

Version 1.55.0

What's Changed

New Contributors

Version 1.54.0

What's Changed

Version 1.53.0

What's Changed

New Contributors

Version 1.52.0

8.5.29

8.5.28

8.5.27

8.5.29

8.5.28

8.5.27

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 13, 2026 •

edited

Loading