An open index of dependabot pull requests across open source projects.

chore(deps): bump the npm-minor-patch group in /frontend with 16 updates

Closed
Number: #142
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: July 07, 2026 at 11:43 PM UTC
(14 days ago)
Updated: July 07, 2026 at 11:46 PM UTC
(14 days ago)
Closed: July 07, 2026 at 11:46 PM UTC
(14 days ago)
Time to Close: 3 minutes
Labels:
dependencies
Description:

Bumps the npm-minor-patch group in /frontend with 16 updates:

Package From To
@ark-ui/react 5.31.0 5.37.2
@fontsource-variable/roboto-mono 5.2.8 5.2.9
@viz-js/viz 3.25.0 3.28.0
@xyflow/react 12.10.2 12.11.2
@xterm/addon-fit 0.10.0 0.11.0
framer-motion 12.34.0 12.42.2
marked 18.0.4 18.0.5
react 19.2.4 19.2.7
@types/react 19.2.13 19.2.17
react-dom 19.2.4 19.2.7
@pandacss/dev 1.8.1 1.11.4
@pandacss/postcss 1.8.1 1.11.4
eslint-plugin-react-hooks 7.0.1 7.1.1
eslint-plugin-react-refresh 0.4.26 0.5.3
postcss 8.5.14 8.5.16
typescript-eslint 8.57.2 8.63.0

Updates @ark-ui/react from 5.31.0 to 5.37.2

Release notes

Sourced from @​ark-ui/react's releases.

@​ark-ui/react@​5.37.2

@​ark-ui/react

[5.37.2] - 2026-06-08

Fixed

  • Fix declaration file output paths so published package export maps resolve to existing types.

[5.37.1] - 2026-06-06

Fixed

    • Date Input: Fix segment placeholders for locales with explicit script subtags.
    • Drawer: Fix flickering when a controlled drawer is swiped or backdrop-closed while the open setter is async (e.g. the History API or a delayed state update).
    • Image Cropper: Fix getCroppedImage and getCropData returning the wrong region when the image is shown at a size different from its natural resolution (e.g. width / height of 100%).
    • Pin Input: Fix data-filled being set on every input on first render.
    • Signature Pad: Fix the dir prop being accepted but never forwarded to the DOM.

[5.37.0] - 2026-05-26

Added

  • Floating Components: Add data-side to placement-aware parts so you can style them based on the current placement (top, bottom, left, right).

    Affects Color Picker, Combobox, Date Picker, Hover Card, Menu, Popover, Select, Tooltip, and Tour.

  • Date Input: Add hideTimeZone prop. When the value is a ZonedDateTime, the timeZoneName segment now renders automatically — set hideTimeZone to hide it. Arrow navigation and auto-advance after typing now reach read-only focusable segments too.

  • Splitter

    • Accept CSS units (px, em, rem, vh, vw) for defaultSize, minSize, and maxSize in addition to percentages.

      <Splitter.Root
        panels={[
          { id: 'nav', minSize: '240px', maxSize: '480px' },
          { id: 'main', minSize: 30 },
        ]}
        defaultSize={['240px', '60vw']}
      />
      
    • Add resizeBehavior per panel. Set to "preserve-pixel-size" to keep a panel's pixel size constant when the parent splitter group resizes.

... (truncated)

Changelog

Sourced from @​ark-ui/react's changelog.

[5.37.2] - 2026-06-08

Fixed

  • Fix declaration file output paths so published package export maps resolve to existing types.

[5.37.1] - 2026-06-06

Fixed

    • Date Input: Fix segment placeholders for locales with explicit script subtags.
    • Drawer: Fix flickering when a controlled drawer is swiped or backdrop-closed while the open setter is async (e.g. the History API or a delayed state update).
    • Image Cropper: Fix getCroppedImage and getCropData returning the wrong region when the image is shown at a size different from its natural resolution (e.g. width / height of 100%).
    • Pin Input: Fix data-filled being set on every input on first render.
    • Signature Pad: Fix the dir prop being accepted but never forwarded to the DOM.

[5.37.0] - 2026-05-26

Added

  • Floating Components: Add data-side to placement-aware parts so you can style them based on the current placement (top, bottom, left, right).

    Affects Color Picker, Combobox, Date Picker, Hover Card, Menu, Popover, Select, Tooltip, and Tour.

  • Date Input: Add hideTimeZone prop. When the value is a ZonedDateTime, the timeZoneName segment now renders automatically — set hideTimeZone to hide it. Arrow navigation and auto-advance after typing now reach read-only focusable segments too.

  • Splitter

    • Accept CSS units (px, em, rem, vh, vw) for defaultSize, minSize, and maxSize in addition to percentages.

      <Splitter.Root
        panels={[
          { id: 'nav', minSize: '240px', maxSize: '480px' },
          { id: 'main', minSize: 30 },
        ]}
        defaultSize={['240px', '60vw']}
      />
      
    • Add resizeBehavior per panel. Set to "preserve-pixel-size" to keep a panel's pixel size constant when the parent splitter group resizes.

    • Allow non-panel children (toolbars, rails, status bars) inside the splitter root. Use partial trigger ids ("left:", ":right") to bind handles around the fixed element.

... (truncated)

Commits
  • fc62e4e chore: release packages (#3915)
  • 16079c8 fix: normalize declaration file paths in Vite config for React and Vue
  • a0d58e7 chore: release packages (#3907)
  • b8dfbba chore(changeset): sync zag 1.41.2 and bump deps
  • 30f4a4f chore: bump lucide
  • efe034c chore: more dep updates
  • 128f8d9 chore: bump more deps
  • da183cd chore: bump uncritical deps
  • da1cf21 chore: pin all dependencies
  • 60833be chore: update typescript to v6
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ark-ui/react since your current version.


Updates @fontsource-variable/roboto-mono from 5.2.8 to 5.2.9

Commits

Updates @viz-js/viz from 3.25.0 to 3.28.0

Release notes

Sourced from @​viz-js/viz's releases.

@​viz-js/viz 3.28.0

  • Update Graphviz to 15.0.0.
  • Fix application of the default attribute options. (#380)

@​viz-js/viz 3.27.0

  • Update Expat to 2.8.1.

@​viz-js/viz 3.26.0

  • Update emdsk to 5.0.5.
  • Update Expat to 2.7.5.
  • Update Graphviz to 14.1.5.
Changelog

Sourced from @​viz-js/viz's changelog.

3.28.0

  • Update Graphviz to 15.0.0.
  • Fix application of the default attribute options. (#380)

3.27.0

  • Update Expat to 2.8.1.

3.26.0

  • Update emsdk to 5.0.5.
  • Update Expat to 2.7.5.
  • Update Graphviz to 14.1.5.
Commits

Updates @xyflow/react from 12.10.2 to 12.11.2

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.2

Patch Changes

@​xyflow/react@​12.11.1

Patch Changes

  • #5815 87da45c - Fix FinalConnectionState type so it preserves the discriminated union.

  • #5823 a6afc91 - Update attribution link

  • #5824 6b1dac5 - Do not fire on pane click when connection ends on pane

  • #5818 4ddc2d8 - Provide the shared handle config (connectOnClick, noPanClassName, rfId) through context instead of subscribing to the store in every Handle, so a store update no longer runs a selector once per handle

  • #5817 8df250b - Reduce per-handle work on store updates by returning a shared connection state while no connection is in progress.

  • #5822 a6249de - Return stable reference for edge position when connected node gets deleted

  • Updated dependencies [ceb8604, 87da45c]:

    • @​xyflow/system@​0.0.78

@​xyflow/react@​12.11.0

12.11.0

Minor Changes

  • #5677 e6661de - Add autoPanOnSelection to auto-pan when user drags a selection close to the edge of the viewport.

Patch Changes

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.11.2

Patch Changes

12.11.1

Patch Changes

  • #5815 87da45c - Fix FinalConnectionState type so it preserves the discriminated union.

  • #5823 a6afc91 - Update attribution link

  • #5824 6b1dac5 - Do not fire on pane click when connection ends on pane

  • #5818 4ddc2d8 - Provide the shared handle config (connectOnClick, noPanClassName, rfId) through context instead of subscribing to the store in every Handle, so a store update no longer runs a selector once per handle

  • #5817 8df250b - Reduce per-handle work on store updates by returning a shared connection state while no connection is in progress.

  • #5822 a6249de - Return stable reference for edge position when connected node gets deleted

  • Updated dependencies [ceb8604, 87da45c]:

    • @​xyflow/system@​0.0.78

12.11.0

Minor Changes

... (truncated)

Commits
  • 3ab66ef chore(packages): bump
  • 01d58b6 Merge pull request #5846 from AlaricBaraou/perf/viewport-imperative-transform
  • 742860c perf(react): skip minimap re-renders when its geometry is unchanged
  • 17c64a1 perf(react): apply the viewport transform imperatively instead of re-renderin...
  • 775bdd6 Merge pull request #5825 from AlaricBaraou/perf/xydrag-draggable-only
  • 576a43d refactor(react): pass nodesDraggable to prevent wrong initial state
  • eedbc81 chore(packages): bump
  • c7bdce4 chore(pane): cleanup
  • cd5ec45 chore(react/pane): cleanup
  • f919daa fix(pane): do not fire pane click when connection ends on pane
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​xyflow/react since your current version.


Updates @xterm/addon-fit from 0.10.0 to 0.11.0

Commits

Updates framer-motion from 12.34.0 to 12.42.2

Changelog

Sourced from framer-motion's changelog.

[12.42.2] 2026-07-01

Fixed

  • animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

  • animateView: Old layer fade out now cancelled when defining .new().

[12.42.0] 2026-06-24

Changed

  • animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

  • animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
  • animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

  • animateView: Moves from Motion+ Early Access and alpha to main library.
  • animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.
  • animateView: .new() and .old() configures values to animate on new and old layers.
  • animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.
  • animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.
  • animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

  • AnimatePresence: Prevent stuck exit animations when children interrupt.
  • drag: Child e.stopPropagation() no longer break drag end.
  • Fixing Next.js OOM on Windows when importing via motion package.
  • animateLayout: Improve handling of parallel/interleaved calls.

Changed

  • animateView: .enter() and .exit() now refer specifically to new and old layers where there are no matching old or new layers.
  • animateView: Interrupted transition setups now return resolved animation rather than throwing.

[12.40.0] 2026-05-21

Added

... (truncated)

Commits
  • 40e8756 v12.42.2
  • 718ccc7 Merge pull request #3768 from motiondivision/view-cropped-corner-radius
  • 19195a4 Dedupe corner-radius longhands; merge crop box/radii measurements
  • 5299aa6 Resolve cropped-clip radius timing once; fix transition-option leak
  • 937cdf3 Animate cropped view-transition group corner radius
  • fd2d6f6 v12.42.1
  • 2223d87 Hold the old layer when only a non-opacity .new() is set
  • 9c84145 v12.42.0
  • 60d7c72 Add view-transition group nesting and aspect-aware cropping
  • 6437276 Updating
  • Additional commits viewable in compare view

Updates marked from 18.0.4 to 18.0.5

Release notes

Sourced from marked's releases.

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

  • parse empty list item with trailing space (#3984) (b55410f)
Commits
  • 4063c63 chore(release): 18.0.5 [skip ci]
  • b55410f fix: parse empty list item with trailing space (#3984)
  • c6e667b chore(deps-dev): bump eslint from 10.4.0 to 10.4.1 (#3986)
  • 95f98ec chore(deps-dev): bump @​arethetypeswrong/cli from 0.18.2 to 0.18.3 (#3985)
  • c1a86f0 Add Node.js usage example to README (#3983)
  • 763f729 chore(deps-dev): bump marked-man from 2.1.0 to 2.1.1 (#3978)
  • 2cf1fd0 chore(deps-dev): bump markdown-it from 14.1.1 to 14.2.0 (#3977)
  • See full diff in compare view

Updates react from 19.2.4 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.13 to 19.2.17

Commits

Updates react-dom from 19.2.4 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @pandacss/dev from 1.8.1 to 1.11.4

Release notes

Sourced from @​pandacss/dev's releases.

@​pandacss/dev@​1.11.4

Patch Changes

  • Updated dependencies [e5e657c]
  • Updated dependencies [8252d77]
    • @​pandacss/token-dictionary@​1.11.4
    • @​pandacss/node@​1.11.4
    • @​pandacss/mcp@​1.11.4
    • @​pandacss/postcss@​1.11.4
    • @​pandacss/config@​1.11.4
    • @​pandacss/logger@​1.11.4
    • @​pandacss/preset-base@​1.11.4
    • @​pandacss/preset-panda@​1.11.4
    • @​pandacss/shared@​1.11.4
    • @​pandacss/types@​1.11.4
Changelog

Sourced from @​pandacss/dev's changelog.

1.11.4

Patch Changes

  • Updated dependencies [e5e657c]
  • Updated dependencies [8252d77]
    • @​pandacss/token-dictionary@​1.11.4
    • @​pandacss/node@​1.11.4
    • @​pandacss/mcp@​1.11.4
    • @​pandacss/postcss@​1.11.4
    • @​pandacss/config@​1.11.4
    • @​pandacss/logger@​1.11.4
    • @​pandacss/preset-base@​1.11.4
    • @​pandacss/preset-panda@​1.11.4
    • @​pandacss/shared@​1.11.4
    • @​pandacss/types@​1.11.4

1.11.3

Patch Changes

  • 9217a6b: Add an engines field (node: >=20) to every published package so consumers and tooling can see the supported Node version.
  • Updated dependencies [b702571]
  • Updated dependencies [6797864]
    • @​pandacss/config@​1.11.3
    • @​pandacss/mcp@​1.11.3
    • @​pandacss/node@​1.11.3
    • @​pandacss/postcss@​1.11.3
    • @​pandacss/logger@​1.11.3
    • @​pandacss/preset-base@​1.11.3
    • @​pandacss/preset-panda@​1.11.3
    • @​pandacss/shared@​1.11.3
    • @​pandacss/token-dictionary@​1.11.3
    • @​pandacss/types@​1.11.3

1.11.2

Patch Changes

  • Updated dependencies [3730779]
    • @​pandacss/node@​1.11.2
    • @​pandacss/types@​1.11.2
    • @​pandacss/mcp@​1.11.2
    • @​pandacss/postcss@​1.11.2
    • @​pandacss/config@​1.11.2
    • @​pandacss/logger@​1.11.2
    • @​pandacss/preset-base@​1.11.2
    • @​pandacss/preset-panda@​1.11.2
    • @​pandacss/shared@​1.11.2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​pandacss/dev since your current version.


Updates @pandacss/postcss from 1.8.1 to 1.11.4

Release notes

Sourced from @​pandacss/postcss's releases.

@​pandacss/postcss@​1.11.4

Patch Changes

  • Updated dependencies [8252d77]
    • @​pandacss/node@​1.11.4
Changelog

Sourced from @​pandacss/postcss's changelog.

1.11.4

Patch Changes

  • Updated dependencies [8252d77]
    • @​pandacss/node@​1.11.4

1.11.3

Patch Changes

  • @​pandacss/node@​1.11.3

1.11.2

Patch Changes

  • Updated dependencies [3730779]
    • @​pandacss/node@​1.11.2

1.11.1

Patch Changes

  • 2f29aa6: Bump postcss from 8.5.6 to 8.5.14 to address CVE-2026-41305.
  • Updated dependencies [2f29aa6]
    • @​pandacss/node@​1.11.1

1.11.0

Patch Changes

  • @​pandacss/node@​1.11.0

1.10.0

Patch Changes

  • Updated dependencies [c31f3a2]
  • Updated dependencies [bbaa8b3]
  • Updated dependencies [22b444d]
  • Updated dependencies [bc2b8d7]
  • Updated dependencies [44457bb]
    • @​pandacss/node@​1.10.0

1.9.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​pandacss/postcss since your current version.


Updates @types/react from 19.2.13 to 19.2.17

Commits

Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.1

Release notes

Sourced from eslint-plugin-react-hooks's releases.

eslint-plugin-react-hooks@7.1.1 (April 17, 2026)

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

  • Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

eslint-plugin-react-hooks@7.1.0 (April 16, 2026)

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.1

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

  • Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Commits

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.3

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.3

  • Fix check for non component class exported via export { } #110 (fixes #109)

v0.5.2

  • Support nested function calls for extraHOCs (actually fixes #104)

v0.5.1

  • Mark ESLint v10 as supported
  • Support false positives with TypeScript function overloading (fixes #105)
  • Support nested function calls for extraHOCs (fixes #104)

v0.5.0

Breaking changes

  • The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
  • A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
    • plugin: The plugin object with the rules
    • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
  • customHOCs option was renamed to extraHOCs
  • Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option (like connect or styled)

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig( /* Main config */ reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }), );

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig({ files: ["/*.ts", "/*.tsx"], plugins: { // other plugins "react-refresh": reactRefresh.plugin, }, rules: { // other rules "react-refresh/only-export-components": [ "warn", { extraHOCs: ["someLibHOC"] }, </tr></table>

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.3

  • Fix check for non component class exported via export { } #110 (fixes #109)

0.5.2

  • Support nested function calls for extraHOCs (actually fixes #104)

0.5.1

  • Mark ESLint v10 as supported
  • Support false positives with TypeScript function overloading (fixes #105)
  • Support nested function calls for extraHOCs (fixes
    Package Dependencies
    Ecosystem:
    npm
    Version Change:
    19.2.13 → 19.2.17
    Update Type:
    Patch
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    7.0.1 → 7.1.1
    Update Type:
    Minor
    Path:
    /frontend
    Package:
    react-dom
    Ecosystem:
    npm
    Version Change:
    19.2.4 → 19.2.7
    Update Type:
    Patch
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    12.34.0 → 12.42.2
    Update Type:
    Minor
    Path:
    /frontend
    Package:
    postcss
    Ecosystem:
    npm
    Version Change:
    8.5.14 → 8.5.16
    Update Type:
    Patch
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    8.57.2 → 8.63.0
    Update Type:
    Minor
    Path:
    /frontend
    Package:
    marked
    Ecosystem:
    npm
    Version Change:
    18.0.4 → 18.0.5
    Update Type:
    Patch
    Path:
    /frontend
    Package:
    react
    Ecosystem:
    npm
    Version Change:
    19.2.4 → 19.2.7
    Update Type:
    Patch
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    0.4.26 → 0.5.3
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    12.10.2 → 12.11.2
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    1.8.1 → 1.11.4
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    5.31.0 → 5.37.2
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    5.2.8 → 5.2.9
    Update Type:
    Patch
    Path:
    /frontend
    Package:
    @viz-js/viz
    Ecosystem:
    npm
    Version Change:
    3.25.0 → 3.28.0
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    0.10.0 → 0.11.0
    Update Type:
    Minor
    Path:
    /frontend
    Ecosystem:
    npm
    Version Change:
    1.8.1 → 1.11.4
    Update Type:
    Minor
    Path:
    /frontend
Technical Details
ID: 16124501
UUID: 4833049997
Node ID: PR_kwDORNDKbc7vDXTK
Host: GitHub
Repository: Solaudity-Corp/solaudity