Skip to content

deps(deps): bump the patch-and-minor group across 1 directory with 24 updates - #46

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-2f331db0e5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-2f331db0e5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 24 updates in the / directory:

Package From To
@capacitor/android 8.5.0 8.5.2
@capacitor/core 8.5.0 8.5.2
@supabase/supabase-js 2.112.4 2.117.1
dompurify 3.4.14 3.4.16
react-hook-form 7.87.0 7.88.0
react-hot-toast 2.6.0 2.6.1
react-router-dom 7.18.3 7.18.4
react-window 2.3.0 2.3.3
tailwind-merge 3.6.0 3.7.0
zod 4.5.4 4.6.5
@capacitor/cli 8.5.0 8.5.2
@playwright/test 1.62.1 1.63.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/user-event 14.6.6 14.6.7
@types/node 26.4.0 26.6.2
@typescript-eslint/eslint-plugin 8.68.0 8.70.1
@typescript-eslint/parser 8.68.0 8.70.1
autoprefixer 10.5.4 10.6.1
eslint 10.9.1 10.11.0
eslint-plugin-react-refresh 0.5.5 0.5.7
globals 17.11.0 17.12.0
postcss 8.5.26 8.5.28
prettier 3.9.6 3.9.9
typescript-eslint 8.68.0 8.70.1

Updates @capacitor/android from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/android's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Changelog

Sourced from @​capacitor/android's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • 0c9e35d Release 8.5.1
  • ee586ae fix: block navigation to the internal HTTP proxy path
  • 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
  • 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
  • See full diff in compare view

Updates @capacitor/core from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/core's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Changelog

Sourced from @​capacitor/core's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • 0c9e35d Release 8.5.1
  • ee586ae fix: block navigation to the internal HTTP proxy path
  • 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
  • 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
  • See full diff in compare view

Updates @supabase/supabase-js from 2.112.4 to 2.117.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.117.1

2.117.1 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

v2.117.1-canary.0

2.117.1-canary.0 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

v2.117.0

2.117.0 (2026-09-22)

🚀 Features

  • auth: forward options.mediation to navigator.credentials.get in signInWithPasskey (#2675)
  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak
  • James Argarin
  • Katerina Skroumpelou

v2.117.0-canary.1

2.117.0-canary.1 (2026-09-22)

🚀 Features

  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak

v2.117.0-canary.0

2.117.0-canary.0 (2026-09-17)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.117.1 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

2.117.0 (2026-09-22)

🚀 Features

  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)

🩹 Fixes

  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

2.115.0 (2026-09-03)

🚀 Features

  • postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

2.114.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

... (truncated)

Commits
  • 739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
  • f34d428 chore(release): version 2.117.0 changelogs (#2697)
  • cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
  • c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
  • 84af33f chore(release): version 2.116.0 changelogs (#2679)
  • 5aedaab feat(auth): add MFA recovery codes API (#2676)
  • e4f675a fix(supabase): warn when schema is passed outside db options (#2663)
  • dbe7679 chore(release): version 2.115.0 changelogs (#2664)
  • 3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
  • 92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.14 to 3.4.16

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates react-hook-form from 7.87.0 to 7.88.0

Release notes

Sourced from react-hook-form's releases.

Version 7.88.0

✨ Features

  • Add Error Message component (#13472)
  • Add the Error Message component for displaying validation errors from React Hook Form.

🐞 Fixes

  • Fix stale validating state after resetField() (#13735)
  • Fix errors and touched state remaining for rows removed by replace() (#13734)
  • Fix stale resolver results updating form state after reset() during handleSubmit() (#13733)
  • Fix nested registered errors being removed when trigger() targets their parent (#13732)
  • Fix resolver-reported root errors being dropped during handleSubmit() (#13731)
  • Fix parent errors being incorrectly set when trigger() targets a field with only nested resolver errors (#13730)
  • Fix useWatch compute cache not being initialized with the initial output (#13728)
  • Fix FileList being lost during flatten/expand and omit undefined values in jsonToFormData (#13725)
  • Fix schemaErrorLookup reporting nested containers as exact-name errors (#13727)
  • Fix isValidating not being recomputed after unregister() clears validating fields (#13723)
  • Fix stale resolver state updates after reset() (#13722)
  • Fix iterateFieldsByAction only breaking out of one loop level (#13718)
  • Fix stale validation types surviving setError() overwrites (#13716)
  • Fix reset() not clearing validating fields (#13714)
  • Fix remove() leaking deleted values onto surviving field-array items (#13713)
  • Fix the React Server build being unpublished (#13709)
  • Fix validateField calling setCustomValidity once per key in validate-object mode (#13707)
  • Fix useFieldArray focus behavior for checkboxes and radio buttons in appended rows (#13705)
  • Fix getFieldState reading isValidating from the supplied form state (#13704)
  • Fix unregister() stripping kept values from the submit payload (#13703)
  • Fix useFormState not re-subscribing when control changes (#13702)
  • Fix reset() keeping dirtyFields out of sync with isDirty when keepValues is enabled (#13701)
  • Fix useForm not reconciling correctly when an Activity subtree is initially hidden (#13698)
  • Fix cleared errors returning after the delayError timer fires (#13697)
  • Fix cloneObject throwing when checking Blob with instanceof (#13694)
  • Fix useFieldArray retaining stale fields after an Activity subtree reconnects (#13688)

🧹 Refactors

  • Extend _isTracked to the remaining multi-key proxy/subscribe form-state checks (#13699)
  • Extract _isTracked helper for proxy/subscribe form-state checks (#13690)
  • Remove the unused abortEarly parameter from iterateFieldsByAction (#13689)
  • Remove redundant optional chaining from clearErrors (#13696)

📝 Documentation

  • Fix useWatch compute example variable names in JSDoc (#13700)

📦 Dependencies

  • Bump joi from 18.2.1 to 18.2.5 (#13719)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.88.0] - 2026-09-12

Added

  • <ErrorMessage /> component for rendering a field's validation error

Fixed

  • setValue dirty state comparison ignoring valueAs* / setValueAs transforms
  • Nested delayError timers not being cancelled when a parent is cleared or unregistered
  • Cleared delayError errors coming back once the pending timer fires
  • criteriaMode not refreshing when form options are updated at runtime
  • resetField leaving stale validating state for the field
  • reset not clearing isValidating and validatingFields, and ignoring keepIsValidating
  • replace() leaving errors and touched state for removed rows
  • remove() leaking deleted values onto surviving items
  • handleSubmit applying a stale resolver result after reset
  • handleSubmit dropping resolver-reported root errors on submit
  • Stale resolver state updates being applied after reset
  • trigger dropping registered nested errors when targeting their parent
  • trigger setting a parent error when the target has only nested resolver errors
  • useWatch compute cache not being initialized with the initial output
  • flatten / jsonToFormData not preserving FileList and not skipping undefined
  • schemaErrorLookup reporting nested containers as exact-name errors
  • unregister not recomputing isValidating after clearing validatingFields
  • unregister stripping a kept value from the submit payload
  • iterateFieldsByAction only breaking out of one loop level
  • setError types from a previous validation surviving an overwrite
  • react-server build not being published
  • validateField calling setCustomValidity per key in validate-object mode
  • useFieldArray not focusing a checkbox or radio in the appended row
  • useFieldArray not reconciling stale fields after an Activity subtree reconnects
  • useForm never reconciling when an Activity subtree is hidden on its first render
  • getFieldState not reading isValidating from the supplied form state
  • useFormState not re-subscribing when control changes
  • reset with keepValues leaving dirtyFields out of sync with isDirty
  • cloneObject not guarding Blob before instanceof
Commits
  • 28334fa 7.88.0
  • 8b7e0e4 🐞 fix(setValue): compare transformed value for dirty state with valueAs/setVa...
  • b5c210b 🐞 fix: cancel nested delayError timers when a parent is cleared or unregister...
  • 8918788 🐞 fix: refresh criteriaMode flag when form options are updated at runtime (#1...
  • 39cfba0 🐞 fix(resetField): clear stale validating state for the field (#13735)
  • a448816 🐞 fix: drop errors and touched state for rows removed by replace() (#13734)
  • 3756191 🐞 fix(handleSubmit): ignore stale resolver result after reset (#13733)
  • d2b757f 🐞 fix(trigger): keep registered nested errors when trigger targets their pare...
  • f32faed 🐞 fix(handleSubmit): keep resolver-reported root errors on submit (#13731)
  • cdcbfca 🐞 fix: don't set parent error when trigger target has only nested resolver er...
  • Additional commits viewable in compare view

Updates react-hot-toast from 2.6.0 to 2.6.1

Release notes

Sourced from react-hot-toast's releases.

v2.6.1

  • Made toast styles easier to override with Tailwind CSS by using :where() to lower CSS specificity. (f339d71)
  • Fixed an issue where toasts stopped updating after a component unmounted when multiple hooks shared the same toasterId. Thanks to @​matthernet for reporting the issue and suggesting the fix! (#436)
  • Fixed TypeScript resolution errors in pnpm strict mode by adding @types/react and @types/react-dom as optional peer dependencies. Thanks to @​q121212 for the fix and @​baraknaveh for the report! (#435)

[[Full changelog: v2.6.0 → v2.6.1](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)

Commits
  • e725d38 2.6.1
  • 114cafd Merge pull request #436 from timolins/codex/fix-use-store-subscriber-cleanup
  • ce3f199 Fix useStore subscriber cleanup
  • 52613c1 Merge pull request #435 from q121212/fix/missing-peer-dep-types-react
  • 64e1fff fix(build): add missing @​types/react and @​types/react-dom peer deps for pnpm ...
  • f339d71 Use :where() for easier Tailwind overrides
  • See full diff in compare view

Updates react-router-dom from 7.18.3 to 7.18.4

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

Commits

Updates react-window from 2.3.0 to 2.3.3

Release notes

Sourced from react-window's releases.

2.3.3

  • Fix small perf regression in version 2.3.2 that caused unnecessary size calculations when scrolling beyond cached bounds dynamic sized rows/columns

2.3.2

  • Improve scrollToRow accuracy for dynamic height rows
  • Bugs fixes
    • Fix RTL scrolling and alignment
    • Fix stale row measurements after keyed reordering
    • Fixed dropped prop updates
    • Use fractional percentage sizing
    • Fix center alignment near list boundaries
  • Performance tweaks:
    • Improve scrolling performance by calculating fixed-size visible ranges directly and searching cached variable-size bounds instead of scanning from the beginning.
    • Fixed-size jumps also avoid allocating bounds for preceding items.

2.3.1

  • Grid updates direction when dir prop changes after mount
Changelog

Sourced from react-window's changelog.

2.3.3

  • Fix small perf regression in version 2.3.2 that caused unnecessary size calculations when scrolling beyond cached bounds dynamic sized rows/columns

2.3.2

  • Improve scrollToRow accuracy for dynamic height rows
  • Bugs fixes
    • Fix RTL scrolling and alignment
    • Fix stale row measurements after keyed reordering
    • Fixed dropped prop updates
    • Use fractional percentage sizing
    • Fix center alignment near list boundaries
  • Performance tweaks:
    • Improve scrolling performance by calculating fixed-size visible ranges directly and searching cached variable-size bounds instead of scanning from the beginning.
    • Fixed-size jumps also avoid allocating bounds for preceding items.

2.3.1

  • Grid updates direction when dir prop changes after mount
Commits

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

  • Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
    • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
    • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Documentation

Other

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 511d68a tailwind-merge@3.7.0
  • 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
  • 9d41508 add changelog for tailwind-merge@3.7.0
  • c78a80f Configurator: Reuse runtime lookups during pruning
  • 49c317d Monorepo: Fix contributing link and include package coverage
  • 7b565ca Configurator: prune a generated config to a project's used classes (core step)
  • d83e013 Releases: auto-re-pin tag-pinned links on every version bump
  • b71fd41 Docs: pin every in-repo file link to a release tag instead of main
  • ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
  • 9521b10 Releases: per-package pipeline with namespaced tags
  • Additional commits viewable in compare view

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @capacitor/cli from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/cli's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Changelog

Sourced from @​capacitor/cli's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • 0c9e35d Release 8.5.1
  • ee586ae fix: block navigation to the internal HTTP proxy path
  • 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (...

    Description has been truncated

… updates

Bumps the patch-and-minor group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/android](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.4` | `2.117.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.16` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.88.0` |
| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.3` | `7.18.4` |
| [react-window](https://github.com/bvaughn/react-window) | `2.3.0` | `2.3.3` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |
| [@capacitor/cli](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.6` | `14.6.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.2` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.68.0` | `8.70.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.68.0` | `8.70.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.5` | `0.5.7` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.68.0` | `8.70.1` |



Updates `@capacitor/android` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@capacitor/core` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@supabase/supabase-js` from 2.112.4 to 2.117.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.117.1/packages/core/supabase-js)

Updates `dompurify` from 3.4.14 to 3.4.16
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.16)

Updates `react-hook-form` from 7.87.0 to 7.88.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.87.0...v7.88.0)

Updates `react-hot-toast` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/timolins/react-hot-toast/releases)
- [Commits](timolins/react-hot-toast@v2.6.0...v2.6.1)

Updates `react-router-dom` from 7.18.3 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `react-window` from 2.3.0 to 2.3.3
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.3.0...2.3.3)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

Updates `@capacitor/cli` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/user-event` from 14.6.6 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.6...v14.6.7)

Updates `@types/node` from 26.4.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.68.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.68.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/parser)

Updates `autoprefixer` from 10.5.4 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.4...10.6.1)

Updates `eslint` from 10.9.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.11.0)

Updates `eslint-plugin-react-refresh` from 0.5.5 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.5...v0.5.7)

Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.12.0)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `typescript-eslint` from 8.68.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@capacitor/android"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@capacitor/core"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.117.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-hook-form
  dependency-version: 7.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react-hot-toast
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-window
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@capacitor/cli"
  dependency-version: 8.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated-pr, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from Gravirei as a code owner September 28, 2026 09:30
@coderabbitai

coderabbitai Bot commented Sep 28, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 2eb4d840-2a04-4285-a112-4b8d959d769f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants