Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

dev: bump the safe group across 1 directory with 15 updates

Open
Number: #7720
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 22, 2025 at 10:08 PM UTC
(10 months ago)
Updated: September 22, 2025 at 10:08 PM UTC
(10 months ago)
Labels:
dependencies javascript
Description:

Bumps the safe group with 15 updates in the / directory:

Package From To
@tabler/icons-react 3.34.1 3.35.0
@reduxjs/toolkit 2.8.2 2.9.0
@sentry/react 10.8.0 10.13.0
apexcharts 5.3.4 5.3.5
query-string 9.2.2 9.3.1
yup 1.7.0 1.7.1
@babel/core 7.28.3 7.28.4
@babel/eslint-parser 7.28.0 7.28.4
@babel/runtime-corejs2 7.28.3 7.28.4
@inquirer/prompts 7.8.4 7.8.6
@storybook/cli 9.1.3 9.1.7
@testing-library/cypress 10.0.3 10.1.0
jest 30.1.2 30.1.3
mjml 4.15.3 4.16.1
stylelint 16.23.1 16.24.0

Updates @tabler/icons-react from 3.34.1 to 3.35.0

Release notes

Sourced from @​tabler/icons-react's releases.

Release 3.55.0

18 new icons:

  • filled/device-gamepad
  • filled/file-dollar
  • filled/file-euro
  • filled/file-music
  • filled/file-pencil
  • filled/file-scissors
  • filled/file-settings
  • filled/file-signal
  • filled/file-time
  • filled/file-unknown
  • filled/file-upload
  • filled/file-vector
  • filled/files
  • filled/registered
  • filled/video-minus
  • filled/video-plus
  • filled/writing-sign
  • filled/writing
Commits

Updates @reduxjs/toolkit from 2.8.2 to 2.9.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.9.0

This feature release rewrites RTK Query's internal subscription and polling systems and the useStableQueryArgs hook for better perf, adds automatic AbortSignal handling to requests still in progress when a cache entry is removed, fixes a bug with the transformResponse option for queries, adds a new builder.addAsyncThunk method, and fixes assorted other issues.

Changelog

RTK Query Performance Improvements

We had reports that RTK Query could get very slow when there were thousands of subscriptions to the same cache entry. After investigation, we found that the internal polling logic was attempting to recalculate the minimum polling time after every new subscription was added. This was highly inefficient, as most subscriptions don't change polling settings, and it required repeated O(n) iteration over the growing list of subscriptions. We've rewritten that logic to debounce the update check and ensure a max of one polling value update per tick for the entire API instance.

Related, while working on the request abort changes, testing showed that use of plain Records to hold subscription data was inefficient because we have to iterate keys to check size. We've rewritten the subscription handling internals to use Maps instead, as well as restructuring some additional checks around in-flight requests.

These two improvements drastically improved runtime perf for the thousands-of-subscriptions-one-cache-entry repro, eliminating RTK methods as visible hotspots in the perf profiles. It likely also improves perf for general usage as well.

We've also changed the implementation of our internal useStableQueryArgs hook to avoid calling serializeQueryArgs on its value, which can avoid potential perf issues when a query takes a very large object as its cache key.

[!NOTE] The internal logic switched from serializing the query arg to doing reference checks on nested values. This means that if you are passing a non-POJO value in a query arg, such as useSomeQuery({a: new Set()}), and you have refetchOnMountOrArgChange enabled, this will now trigger refeteches each time as the Set references are now considered different based on equality instead of serialization.

Abort Signal Handling on Cleanup

We've had numerous requests over time for various forms of "abort in-progress requests when the data is no longer needed / params change / component unmounts / some expensive request is taking too long". This is a complex topic with multiple potential use cases, and our standard answer has been that we don't want to abort those requests - after all, cache entries default to staying in memory for 1 minute after the last subscription is removed, so RTKQ's cache can still be updated when the request completes. That also means that it doesn't make sense to abort a request "on unmount".

However, it does then make sense to abort an in-progress request if the cache entry itself is removed. Given that, we've updated our cache handling to automatically call the existing resPromise.abort() method in that case, triggering the AbortSignal attached to the baseQuery. The handling at that point depends on your app - fetchBaseQuery should handle that, a custom baseQuery or queryFn would need to listen to the AbortSignal.

We do have an open issue asking for further discussions of potential abort / cancelation use cases and would appreciate further feedback.

New Options

The builder callback used in createReducer and createSlice.extraReducers now has builder.addAsyncThunk available, which allows handling specific actions from a thunk in the same way that you could define a thunk inside createSlice.reducers:

        const slice = createSlice({
          name: 'counter',
          initialState: {
            loading: false,
            errored: false,
            value: 0,
          },
          reducers: {},
          extraReducers: (builder) =>
            builder.addAsyncThunk(asyncThunk, {
              pending(state) {
                state.loading = true
              },
              fulfilled(state, action) {
                state.value = action.payload
              },
              rejected(state) {
                state.errored = true
              },
</tr></table>

... (truncated)

Commits
  • 98c54c6 Release 2.9.0
  • 0a86abd export some useful async thunk types
  • d02c27a add docs for addAsyncThunk (#5066)
  • ab346b9 fixdoc: incorrect position of keepUnusedDataFor for two scenarios (#5062)
  • d2bbb8d Rewrite subscription handling and polling calculations for better perf (#5064)
  • 3c6de47 Merge pull request #5065 from reduxjs/feature/TS5.9-matrix
  • c37b977 Add missing error value
  • 38537c3 Don't run Node10 checks for TS 6+
  • 821be20 Add TS 5.9 to the matrix
  • 407688d Abort pending requests if the cache entry is removed (#5061)
  • Additional commits viewable in compare view

Updates @sentry/react from 10.8.0 to 10.13.0

Release notes

Sourced from @​sentry/react's releases.

10.13.0

Important Changes

  • feat(browser): Add option to explicitly end pageload span via reportPageLoaded() (#17697)

    With this release you can take manual control of ending the pageload span. Usually this span is ended automatically by the SDK, based on a period of inactivity after the initial page was loaded in the browser. If you want full control over the pageload duration, you can tell Sentry, when your page was fully loaded:

    Sentry.init({
  //...
  integrations: [
    // 1. Enable manual pageload reporting
    Sentry.browserTracingIntegration({ enableReportPageLoaded: true }),
  ],
});

    // 2. Whenever you decide the page is loaded, call:
    
Sentry.reportPageLoaded();

    Note that if Sentry.reportPageLoaded() is not called within 30 seconds of the initial pageload (or whatever value the finalTimeout option is set to), the pageload span will be ended automatically.

  • feat(core,node): Add instrumentation for GoogleGenerativeAI (#17625)

    The SDK now automatically instruments the @google/generative-ai package to provide insights into your AI operations.

  • feat(nextjs): Promote useRunAfterProductionCompileHook to non-experimental build option (#17721)

    The useRunAfterProductionCompileHook option is no longer experimental and is now a stable build option for Next.js projects.

  • feat(nextjs): Use afterProductionCompile hook for webpack builds (#17655)

    Next.js projects using webpack can opt-in to use the useRunAfterProductionCompileHook hook for source map uploads.

  • feat(nextjs): Flip default value for useRunAfterProductionCompileHook for Turbopack builds (#17722)

    The useRunAfterProductionCompileHook option is now enabled by default for Turbopack builds, enabling automated source map uploads.

  • feat(node): Do not drop 300 and 304 status codes by default (#17686)

    HTTP transactions with 300 and 304 status codes are now captured by default, providing better visibility into redirect and caching behavior.

Other Changes

  • feat(core): Add logger to core and allow scope to be passed log methods (#17698)
  • feat(core): Allow to pass onSuccess to handleCallbackErrors (#17679)
  • feat(core): Create template attributes in consoleLoggingIntegration (#17703)
  • feat(deps): bump @​sentry/cli from 2.52.0 to 2.53.0 (#17652)
  • feat(node): Add extra platforms to os context (#17720)
  • fix(browser): Ensure idle span duration is adjusted when child spans are ignored (#17700)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.13.0

Important Changes

  • feat(browser): Add option to explicitly end pageload span via reportPageLoaded() (#17697)

    With this release you can take manual control of ending the pageload span. Usually this span is ended automatically by the SDK, based on a period of inactivity after the initial page was loaded in the browser. If you want full control over the pageload duration, you can tell Sentry, when your page was fully loaded:

    Sentry.init({
  //...
  integrations: [
    // 1. Enable manual pageload reporting
    Sentry.browserTracingIntegration({ enableReportPageLoaded: true }),
  ],
});

    // 2. Whenever you decide the page is loaded, call:
    
Sentry.reportPageLoaded();

    Note that if Sentry.reportPageLoaded() is not called within 30 seconds of the initial pageload (or whatever value the finalTimeout option is set to), the pageload span will be ended automatically.

  • feat(core,node): Add instrumentation for GoogleGenerativeAI (#17625)

    The SDK now automatically instruments the @google/generative-ai package to provide insights into your AI operations.

  • feat(nextjs): Promote useRunAfterProductionCompileHook to non-experimental build option (#17721)

    The useRunAfterProductionCompileHook option is no longer experimental and is now a stable build option for Next.js projects.

  • feat(nextjs): Use afterProductionCompile hook for webpack builds (#17655)

    Next.js projects using webpack can opt-in to use the useRunAfterProductionCompileHook hook for source map uploads.

  • feat(nextjs): Flip default value for useRunAfterProductionCompileHook for Turbopack builds (#17722)

    The useRunAfterProductionCompileHook option is now enabled by default for Turbopack builds, enabling automated source map uploads.

  • feat(node): Do not drop 300 and 304 status codes by default (#17686)

    HTTP transactions with 300 and 304 status codes are now captured by default, providing better visibility into redirect and caching behavior.

Other Changes

  • feat(core): Add logger to core and allow scope to be passed log methods (#17698)
  • feat(core): Allow to pass onSuccess to handleCallbackErrors (#17679)
  • feat(core): Create template attributes in consoleLoggingIntegration (#17703)
  • feat(deps): bump @​sentry/cli from 2.52.0 to 2.53.0 (#17652)
  • feat(node): Add extra platforms to os context (#17720)

... (truncated)

Commits
  • d18a95e release: 10.13.0
  • a2e84ff Merge pull request #17727 from getsentry/prepare-release/10.13.0
  • 85e8678 meta(changelog): Update changelog for 10.13.0
  • 61b3f97 feat(nextjs): Flip default value for useRunAfterProductionCompileHook turbo...
  • cf7913c feat(nextjs): Promote useRunAfterProductionCompileHook to non-experimental ...
  • 9e24a70 chore: Add external contributor to CHANGELOG.md (#17725)
  • 592ed90 chore: Add link to build and test icon in readme (#17719)
  • 51c16a4 feat(node): Add extra platforms to os context (#17720)
  • ee4ed05 chore(repo): Add changelog entry for reportPageLoaded (#17724)
  • 0e0c711 feat(core): Create template attributes in consoleLoggingIntegration (#17703)
  • Additional commits viewable in compare view

Updates apexcharts from 5.3.4 to 5.3.5

Commits

Updates query-string from 9.2.2 to 9.3.1

Release notes

Sourced from query-string's releases.

v9.3.1

  • Fix custom type functions with array formats 720f2ff

https://github.com/sindresorhus/query-string/compare/v9.3.0...v9.3.1

v9.3.0

  • Add replacer option to stringify() 509014d
  • Fix encoded separator incorrectly splitting single values into arrays ec67fea

https://github.com/sindresorhus/query-string/compare/v9.2.2...v9.3.0

Commits
  • 6c6f660 9.3.1
  • 720f2ff Fix custom type functions with array formats
  • b46abfc 9.3.0
  • 509014d Add replacer option to stringify()
  • ab603a8 Document supported value types for stringify()
  • ec67fea Fix encoded separator incorrectly splitting single values into arrays
  • 2e1f45a Add comprehensive test coverage for queryString.exclude()
  • See full diff in compare view

Updates yup from 1.7.0 to 1.7.1

Changelog

Sourced from yup's changelog.

1.7.1 (2025-09-21)

Commits

Updates @babel/core from 7.28.3 to 7.28.4

Release notes

Sourced from @​babel/core's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

:house: Internal

Committers: 5

Changelog

Sourced from @​babel/core's changelog.

v7.28.4 (2025-09-05)

:house: Internal

Commits

Updates @babel/eslint-parser from 7.28.0 to 7.28.4

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

:house: Internal

Committers: 5

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

:bug: Bug Fix

:nail_care: Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

:memo: Documentation

:house: Internal

:microscope: Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

Committers: 5

... (truncated)

Changelog

Sourced from @​babel/eslint-parser's changelog.

v7.28.4 (2025-09-05)

:house: Internal

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

:bug: Bug Fix

:nail_care: Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

:memo: Documentation

:house: Internal

:microscope: Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

v7.28.2 (2025-07-24)

:bug: Bug Fix

  • babel-types
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

v7.28.1 (2025-07-12)

:bug: Bug Fix

  • babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

:memo: Documentation

... (truncated)

Commits

Updates @babel/runtime-corejs2 from 7.28.3 to 7.28.4

Release notes

Sourced from @​babel/runtime-corejs2's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

:house: Internal

Committers: 5

Changelog

Sourced from @​babel/runtime-corejs2's changelog.

v7.28.4 (2025-09-05)

:house: Internal

Commits

Updates @inquirer/prompts from 7.8.4 to 7.8.6

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​7.8.6

  • Reduce number of transitive dependencies

@​inquirer/prompts@​7.8.5

  • Fix #1834: (rawlist) Allows specifying numbers as explicit keys of option within the list.
Commits
  • 8300fe3 Publish
  • b85cbe2 chore: Speed up linting CI stage
  • 8fc86fe feat: Introduce @​inquirer/core/ansi export
  • dcca892 chore(@​inquirer/testing): Remove unnecessary ansi code filtering logic
  • daef4f5 chore: Bump yarn + yarn dedupe
  • 62045dc Publish
  • 7e75de6 Publish
  • b8361c5 fix(@​inquirer/rawlist): Properly handle specified numeric keys (previously wo...
  • e3aed9c Chore(deps): Bump actions/setup-node from 4 to 5 (#1832)
  • 93c7750 Chore(deps-dev): Bump the linting group with 6 updates (#1831)
  • Additional commits viewable in compare view

Updates @storybook/cli from 9.1.3 to 9.1.7

Release notes

Sourced from @​storybook/cli's releases.

v9.1.7

9.1.7

v9.1.6

9.1.6

v9.1.5

9.1.5

v9.1.4

9.1.4

Changelog

Sourced from @​storybook/cli's changelog.

9.1.7

9.1.6

9.1.5

9.1.4

Commits
  • 006b304 Bump version from "9.1.6" to "9.1.7" [skip ci]
  • 304edc3 Bump version from "9.1.5" to "9.1.6" [skip ci]
  • 56c04b0 Bump version from "9.1.4" to "9.1.5" [skip ci]
  • 9f02684 Bump version from "9.1.3" to "9.1.4" [skip ci]
  • c1dd869 Update sandbox generation script to include resolutions for @​types/react and ...
  • e1fcd14 Update sandbox generation script to include resolutions for react and react-d...
  • See full diff in compare view

Updates @testing-library/cypress from 10.0.3 to 10.1.0

Release notes

Sourced from @​testing-library/cypress's releases.

v10.1.0

10.1.0 (2025-09-02)

Features

Commits

Updates jest from 30.1.2 to 30.1.3

Release notes

Sourced from jest's releases.

30.1.3

Fixes

  • Fix unstable_mockModule with node: prefixed core modules.
Changelog

Sourced from jest's changelog.

30.1.3

Fixes

  • Fix unstable_mockModule with node: prefixed core modules.
Commits

Updates mjml from 4.15.3 to 4.16.1

Release notes

Sourced from mjml's releases.

v4.16.1

Fixes

  • Fix build issue of version 4.16.0 for mjml-browser

Full Changelog: https://github.com/mjmlio/mjml/compare/v4.16.0...v4.16.1

v4.16.0

What's Changed

Features

Fixes

Documentation

Dependencies

New Contributors

Full Changelog: https://github.com/mjmlio/mjml/compare/v4.15.3...v4.16.0

Commits
  • c2021f7 v4.16.1
  • c4e003a v4.16.0
  • c9a4c10 Merge pull request #2980 from mjmlio/fix-2979
  • 9224d69 fix(mjml-wrapper/section): border-radius bug
  • 0abf95f fix(babel): updated to latest
  • 3d87d12 fix(mjml-parser): better comments rendering
  • 848ee01 fix(mjml-accordion): Added font-weight attribute to mj-accordion-title #2936
  • fb2f3dd fix(mjml-wrapper/mjml-section): border-radius not being applied #2961
  • 8b41953 fix(mjml-table): supports 'auto' table width - #2906
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by totocap, a new releaser for mjml since your current version.


Updates stylelint from 16.23.1 to 16.24.0

Release notes

Sourced from stylelint's releases.

16.24.0

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

Package Dependencies
Package:
 @sentry/react
Ecosystem:
npm
Version Change:
10.8.0 → 10.13.0
Update Type:
Minor
Package:
@babel/core
Ecosystem:
npm
Version Change:
7.28.3 → 7.28.4
Update Type:
Patch
Package:
@babel/eslint-parser
Ecosystem:
npm
Version Change:
7.28.0 → 7.28.4
Update Type:
Patch
Package:
stylelint
Ecosystem:
npm
Version Change:
16.23.1 → 16.24.0
Update Type:
Minor
Package:
@reduxjs/toolkit
Ecosystem:
npm
Version Change:
2.8.2 → 2.9.0
Update Type:
Minor
Package:
@storybook/cli
Ecosystem:
npm
Version Change:
9.1.3 → 9.1.7
Update Type:
Patch
Package:
jest
Ecosystem:
npm
Version Change:
30.1.2 → 30.1.3
Update Type:
Patch
Package:
apexcharts
Ecosystem:
npm
Version Change:
5.3.4 → 5.3.5
Update Type:
Patch
Package:
@inquirer/prompts
Ecosystem:
npm
Version Change:
7.8.4 → 7.8.6
Update Type:
Patch
Package:
query-string
Ecosystem:
npm
Version Change:
9.2.2 → 9.3.1
Update Type:
Minor
Package:
@babel/runtime-corejs2
Ecosystem:
npm
Version Change:
7.28.3 → 7.28.4
Update Type:
Patch
Package:
@tabler/icons-react
Ecosystem:
npm
Version Change:
3.34.1 → 3.35.0
Update Type:
Minor
Package:
yup
Ecosystem:
npm
Version Change:
1.7.0 → 1.7.1
Update Type:
Patch
Package:
@testing-library/cypress
Ecosystem:
npm
Version Change:
10.0.3 → 10.1.0
Update Type:
Minor
Package:
mjml
Ecosystem:
npm
Version Change:
4.15.3 → 4.16.1
Update Type:
Minor
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 8254161
UUID: 2851270267
Node ID: PR_kwDOCdvj-c6p8u57
Host: GitHub
Repository: TheThingsNetwork/lorawan-stack
Merge State: Unknown