Skip to content

Javascript dependency: bump the web-javascript-minor-and-patch group across 1 directory with 20 updates - #10434

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-d945d71a86
Open

Javascript dependency: bump the web-javascript-minor-and-patch group across 1 directory with 20 updates#10434
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-d945d71a86

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-javascript-minor-and-patch group with 20 updates in the /web directory:

Package From To
@tanstack/react-virtual 3.14.10 3.14.13
anti-trojan-source 1.12.2 1.13.0
diff-arrays-of-objects 1.1.11 1.1.12
dompurify 3.4.14 3.4.15
hotkeys-js 4.0.7 4.0.8
ip-address 10.5.0 10.7.1
marked 18.0.11 18.0.13
moment 2.30.1 2.31.0
postcss 8.5.26 8.5.28
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.5 19.3.0
react-frame-component 5.2.7 5.3.2
@testing-library/dom 10.4.1 10.4.2
@testing-library/user-event 14.6.3 14.6.7
autoprefixer 10.5.4 10.6.0
typescript-eslint 8.69.0 8.70.0
webpack 5.108.4 5.111.0
webpack-bundle-analyzer 5.3.2 5.3.3

Updates @tanstack/react-virtual from 3.14.10 to 3.14.13

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.13

Patch Changes

  • #1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

  • Updated dependencies [06d1b6b, 2c0a0ea]:

    • @​tanstack/virtual-core@​3.17.11

@​tanstack/react-virtual@​3.14.12

Patch Changes

  • Updated dependencies [ab3278c]:
    • @​tanstack/virtual-core@​3.17.10

@​tanstack/react-virtual@​3.14.11

Patch Changes

  • Updated dependencies [4a0adf3]:
    • @​tanstack/virtual-core@​3.17.9
Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.13

Patch Changes

  • #1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

  • Updated dependencies [06d1b6b, 2c0a0ea]:

    • @​tanstack/virtual-core@​3.17.11

3.14.12

Patch Changes

  • Updated dependencies [ab3278c]:
    • @​tanstack/virtual-core@​3.17.10

3.14.11

Patch Changes

  • Updated dependencies [4a0adf3]:
    • @​tanstack/virtual-core@​3.17.9
Commits
  • 78371e8 ci: Version Packages (#1279)
  • b48e3b0 fix(react-virtual): skip flushSync while measuring from the ref callback (#1282)
  • 1a57cf7 test(react-virtual): wait for smooth scrolls to settle instead of a fixed 2s ...
  • 2c0a0ea fix(virtual-core): keep a travelling smooth scroll alive through a prepend (#...
  • df47889 ci: Version Packages (#1277)
  • 171029d ci: Version Packages (#1269)
  • 4a0adf3 fix(virtual-core): re-issue clamped end-anchor compensation once the sizer gr...
  • See full diff in compare view

Updates anti-trojan-source from 1.12.2 to 1.13.0

Release notes

Sourced from anti-trojan-source's releases.

v1.13.0

1.13.0 (2026-09-08)

Features

  • Update README with video and image examples (5c95bf5)
Commits

Updates diff-arrays-of-objects from 1.1.11 to 1.1.12

Release notes

Sourced from diff-arrays-of-objects's releases.

v1.11.12

Dependency security patches

Commits

Updates dompurify from 3.4.14 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates hotkeys-js from 4.0.7 to 4.0.8

Release notes

Sourced from hotkeys-js's releases.

v4.0.8

Buy me a coffee npm bundle size npm version

Documentation v4.0.8: https://raw.githack.com/jaywcjlove/hotkeys/bf98015/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.7...v4.0.8

npm i hotkeys-js@4.0.8
Commits

Updates ip-address from 10.5.0 to 10.7.1

Release notes

Sourced from ip-address's releases.

v10.7.1

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.0...v10.7.1

v10.7.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.6.0...v10.7.0

v10.6.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.5.1...v10.6.0

v10.5.1

Full Changelog: beaugunderson/ip-address@v10.5.0...v10.5.1

Commits
  • f0c25df 10.7.1
  • 8b34a21 Merge commit from fork
  • 13b6155 Merge commit from fork
  • 469ead1 Reject an address longer than the family allows before parsing it
  • 1343629 Report an address of the other family as not contained
  • 4c2184a Bump js-yaml and brace-expansion in the lockfile (#226)
  • 2b7cab5 10.7.0
  • 87fae23 Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct ...
  • 42c1f8b 10.6.0
  • fb12583 Add isGlobal() and pin the classifiers to the IANA special-purpose registries...
  • Additional commits viewable in compare view

Updates marked from 18.0.11 to 18.0.13

Release notes

Sourced from marked's releases.

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

  • allow tabs in the thematic break that ends a list item (#4087) (afbb27c)
  • avoid O(n^2) scanning in reflinkSearch (#4090) (c6a25bb)
  • case fold reference link labels (#4077) (aed9336)
  • drop the leading whitespace after a hard line break (#4075) (123ce04)
  • match html block start conditions when ending a list item (#4072) (c2facac)
  • respect raw tokens when closing link labels (#4066) (ef394f7)
  • strip a tab that follows spaces in an indented code block (#4080) (dbb393d)

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

  • allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
  • allow one more level of nested brackets in a link label (#4064) (37b28d8)
  • do not add a newline to an empty code block (#4073) (23b1706)
  • escape character references in autolink destinations (#4053) (8f432f0)
  • reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
  • reject invalid characters in HTML tag names (#4083) (300bb1d)
  • remove up to the fence indentation from each content line (#4074) (0244f08)
Commits
  • 634f810 chore(release): 18.0.13 [skip ci]
  • 2a66071 docs: add AtlasDocs to the list of tools using Marked (#4093)
  • c2facac fix: match html block start conditions when ending a list item (#4072)
  • ef394f7 fix: respect raw tokens when closing link labels (#4066)
  • c6a25bb fix: avoid O(n^2) scanning in reflinkSearch (#4090)
  • a43c064 chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 (#4089)
  • afbb27c fix: allow tabs in the thematic break that ends a list item (#4087)
  • aed9336 fix: case fold reference link labels (#4077)
  • 123ce04 fix: drop the leading whitespace after a hard line break (#4075)
  • dbb393d fix: strip a tab that follows spaces in an indented code block (#4080)
  • Additional commits viewable in compare view

Updates moment from 2.30.1 to 2.31.0

Release notes

Sourced from moment's releases.

2.31.0

Released Sep 14, 2026

Security fixes

Bug fixes

  • #6376 Prevent object prototype properties from being used as format tokens
  • #6386 Normalize lazy-loaded locale names
  • #6404 Fix parsing issue with eHHmm format
  • #6433 Ignore non-Moment arguments in min and max
  • #6434 Fix inherited lowercase long date formats
  • #6436 Reset locale parsing caches after updates
  • #6437 Fix weekday mismatch when the format only has part of a date
  • #6442 Fix locale('__proto__') corrupting the global locale
  • #6443 Avoid Object.assign in duration.humanize
  • #6446 Validate range when parsing a time zone offset
  • #6447 Include metadata in all-locales bundle
  • #6448 Apply postformat to locale relative time methods
  • #6450 Add stack traces to conditional deprecation warnings

New features

  • #6451 Add internal date-default hook for Moment Timezone
New locales

Updates to existing locales

  • #5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time
  • #6197 Indonesian ('id'): Correct the abbreviation for August
  • #6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats
  • #6289 Swedish ('sv'): Correct the abbreviation for Thursday
  • #6306 Catalan ('ca'): Use typographic apostrophes in relative time
  • #6347 Swahili ('sw'): Correct the spelling of hour in calendar output
  • #6360 Ukrainian ('uk'): Use ISO week numbering
  • #6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names
  • #6371 Hungarian ('hu'): Preserve numeric values in relative seconds
  • #6391 Swahili ('sw'): Fix weekday and relative-time grammar
  • #6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots
  • #6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting
  • #6410 Polish ('pl'): Use genitive month names in dotted day formats
Changelog

Sourced from moment's changelog.

2.31.0

Released Sep 14, 2026

Security fixes

Bug fixes

  • #6376 Prevent object prototype properties from being used as format tokens
  • #6386 Normalize lazy-loaded locale names
  • #6404 Fix parsing issue with eHHmm format
  • #6433 Ignore non-Moment arguments in min and max
  • #6434 Fix inherited lowercase long date formats
  • #6436 Reset locale parsing caches after updates
  • #6437 Fix weekday mismatch when the format only has part of a date
  • #6442 Fix locale('__proto__') corrupting the global locale
  • #6443 Avoid Object.assign in duration.humanize
  • #6446 Validate range when parsing a time zone offset
  • #6447 Include metadata in all-locales bundle
  • #6448 Apply postformat to locale relative time methods
  • #6450 Add stack traces to conditional deprecation warnings

New features

  • #6451 Add internal date-default hook for Moment Timezone
New locales

Updates to existing locales

  • #5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time
  • #6197 Indonesian ('id'): Correct the abbreviation for August
  • #6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats
  • #6289 Swedish ('sv'): Correct the abbreviation for Thursday
  • #6306 Catalan ('ca'): Use typographic apostrophes in relative time
  • #6347 Swahili ('sw'): Correct the spelling of hour in calendar output
  • #6360 Ukrainian ('uk'): Use ISO week numbering
  • #6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names
  • #6371 Hungarian ('hu'): Preserve numeric values in relative seconds
  • #6391 Swahili ('sw'): Fix weekday and relative-time grammar
  • #6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots
  • #6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting
  • #6410 Polish ('pl'): Use genitive month names in dotted day formats
Commits
  • 15b45d4 [pkg] Build 2.31.0 (#6452)
  • 631cd81 [pkg] Update changelog for upcoming release (#6394)
  • 6caff9e Merge commit from fork
  • 710703b [feature] Add internal date-default hook for Moment Timezone (#6451)
  • 863ed94 [bugfix] Add stack traces to conditional deprecation warnings (#6450)
  • 2c7abe1 [bugfix] Apply postformat to locale relative time methods (#6448)
  • 9c45ac3 [bugfix] Include metadata in all-locales bundle (#6447)
  • f6eefc5 [bugfix] Validate timezone offset range (#6446)
  • 136b441 [bugfix] Avoid Object.assign in duration.humanize (#6443)
  • 0d10504 [bugfix] Fix locale('proto') corrupting the global locale (#6442)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for moment since your current version.


Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

  • Fixes types regression.

8.5.27

Changelog

Sourced from postcss's changelog.

8.5.28

  • Fixes types regression.

8.5.27

Commits

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

@dependabot
Javascript dependency: bump the web-javascript-minor-and-patch group …
5e0c01c 
…across 1 directory with 20 updates

Bumps the web-javascript-minor-and-patch group with 20 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` |
| [anti-trojan-source](https://github.com/lirantal/anti-trojan-source) | `1.12.2` | `1.13.0` |
| [diff-arrays-of-objects](https://github.com/malcolmvr/diff-arrays-of-objects) | `1.1.11` | `1.1.12` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.15` |
| [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js) | `4.0.7` | `4.0.8` |
| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.1` |
| [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.0.13` |
| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` |
| [react-frame-component](https://github.com/ryanseddon/react-frame-component) | `5.2.7` | `5.3.2` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.3` | `14.6.7` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.70.0` |
| [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.111.0` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.3.2` | `5.3.3` |



Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.13/packages/react-virtual)

Updates `anti-trojan-source` from 1.12.2 to 1.13.0
- [Release notes](https://github.com/lirantal/anti-trojan-source/releases)
- [Changelog](https://github.com/lirantal/anti-trojan-source/blob/main/RELEASE.md)
- [Commits](lirantal/anti-trojan-source@v1.12.2...v1.13.0)

Updates `diff-arrays-of-objects` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/malcolmvr/diff-arrays-of-objects/releases)
- [Commits](malcolmvr/diff-arrays-of-objects@v1.1.11...v1.1.12)

Updates `dompurify` from 3.4.14 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.15)

Updates `hotkeys-js` from 4.0.7 to 4.0.8
- [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases)
- [Commits](jaywcjlove/hotkeys-js@v4.0.7...v4.0.8)

Updates `ip-address` from 10.5.0 to 10.7.1
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.5.0...v10.7.1)

Updates `marked` from 18.0.11 to 18.0.13
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.11...v18.0.13)

Updates `moment` from 2.30.1 to 2.31.0
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.30.1...2.31.0)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.5 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-frame-component` from 5.2.7 to 5.3.2
- [Release notes](https://github.com/ryanseddon/react-frame-component/releases)
- [Changelog](https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md)
- [Commits](ryanseddon/react-frame-component@v5.2.7...v5.3.2)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/user-event` from 14.6.3 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.3...v14.6.7)

Updates `autoprefixer` from 10.5.4 to 10.6.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.4...10.6.0)

Updates `typescript-eslint` from 8.69.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

Updates `webpack` from 5.108.4 to 5.111.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.4...v5.111.0)

Updates `webpack-bundle-analyzer` from 5.3.2 to 5.3.3
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.3.2...v5.3.3)

---
updated-dependencies:
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: anti-trojan-source
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: diff-arrays-of-objects
  dependency-version: 1.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: dompurify
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: hotkeys-js
  dependency-version: 4.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: ip-address
  dependency-version: 10.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: marked
  dependency-version: 18.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: moment
  dependency-version: 2.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: react-frame-component
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: webpack
  dependency-version: 5.111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Sep 18, 2026
@coderabbitai

coderabbitai Bot commented Sep 18, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: e72677f0-b362-48c7-9760-4690571004c7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants