chore(deps-dev): bump @tanstack/react-virtual from 3.14.13 to 3.14.14

[dependabot]

Bumps @tanstack/react-virtual from 3.14.13 to 3.14.14.

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.14

Patch Changes

• #1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

  Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

• Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

  • @​tanstack/virtual-core@​3.18.0

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.14

Patch Changes

• #1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

  Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

• Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

  • @​tanstack/virtual-core@​3.18.0

Commits

• 259fc1a ci: Version Packages (#1299)
• 2a631f4 fix(virtual-core): reconcile index scrolls after pending measurements (#1294)
• ce57b78 fix(react-virtual): position directDomUpdates rows that mount without the own...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: cc4eb39c-8f5e-431a-9686-2d5c5cbc3e18

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​tanstack/​react-virtual@​3.14.13 ⏵ 3.14.14	+1		+1	+2

View full report

[github-actions]

Automated approval for Dependabot dependency update.

[github-actions]

Thanks @dependabot[bot] for keeping our dependencies current! 🙌

[NiveditJain]

Superseded by #901, which combines every open Dependabot update into one PR (this commit is cherry-picked there unchanged) and clears the OSV-Scanner gate that was red on all of them.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.