[dependabot]

Bumps the production-dependencies group with 7 updates in the /xingran-react-frontend directory:

Package	From	To
@react-three/drei	10.7.8	10.7.9
@react-three/fiber	9.7.0	9.8.1
@tanstack/react-query	5.103.1	5.104.1
antd	6.6.4	6.6.5
postcss	8.5.28	8.5.29
react-grid-layout	2.2.4	2.3.0
three	0.186.0	0.186.1

Updates @react-three/drei from 10.7.8 to 10.7.9

Release notes

Sourced from @​react-three/drei's releases.

v10.7.9

10.7.9 (2026-09-25)

Bug Fixes

• AccumulativeShadows: keep scene.environment out of the light map (#2833) (1397c37)
• keep SoftShadows compatible with newer three versions (#2846) (66b9bda)

Commits

• 66b9bda fix: keep SoftShadows compatible with newer three versions (#2846)
• 1397c37 fix(AccumulativeShadows): keep scene.environment out of the light map (#2833)
• See full diff in compare view

Updates @react-three/fiber from 9.7.0 to 9.8.1

Release notes

Sourced from @​react-three/fiber's releases.

v9.8.1

The main changes here are bug fixes:

• Activity now works completely inside of R3F, even across boundaries with React DOM. Ie, an Activity that wraps the Canvas.
• In some cases a renderer would not be disposed when the Canvas was unmounted. This is fixed and we clarify in which instances we auto-dispose.

What's Changed

• fix(core): dispose the renderer R3F creates when its root unmounts by @​tonyblu331 in pmndrs/react-three-fiber#3942
• fix(core): preserve visibility across Activity and Suspense hiding by @​krispya in pmndrs/react-three-fiber#3944
• fix(web): keep a Canvas root alive while hides it by @​tonyblu331 in pmndrs/react-three-fiber#3943
• fix(core): stop Canvas rerenders from resetting runtime settings by @​krispya in pmndrs/react-three-fiber#3945
• fix(core): bridge Activity visibility into Canvas scenes by @​krispya in pmndrs/react-three-fiber#3946

New Contributors

• @​tonyblu331 made their first contribution in pmndrs/react-three-fiber#3942

Full Changelog: pmndrs/react-three-fiber@v9.8.0...v9.8.1

v9.8.0

The headline feature is that R3F is now compatible with React 19.3.0. We don't fully support all of the new APIs, but it will not longer conflict to run the latest and greatest React.

In addition we fixed some long standing bugs:

• React roots are configured synchronously and then gated on the renderer if it need async, for example with WebGPURenderer. This means that you won't get awkward out of sync issues.
• Strict Mode no longer causes problems for our canvas. This was related to the async support added a while ago as well.

Have fun!

What's Changed

• fix: corrected broken links by @​dor-rondel in pmndrs/react-three-fiber#3872
• feat: support React 19.3 by @​cades in pmndrs/react-three-fiber#3916
• fix(core): don't tear down a root remounted during the unmount grace period by @​abernier in pmndrs/react-three-fiber#3869
• feat(core): configure and render roots synchronously by @​krispya in pmndrs/react-three-fiber#3925

New Contributors

• @​dor-rondel made their first contribution in pmndrs/react-three-fiber#3872
• @​cades made their first contribution in pmndrs/react-three-fiber#3916

Full Changelog: pmndrs/react-three-fiber@v9.7.0...v9.8.0

Commits

• 53ec672 RELEASING: Releasing 1 package(s)
• e0e9c2d fix(core): bridge Activity visibility into Canvas scenes (#3946)
• 138bfb0 fix(core): stop Canvas rerenders from resetting runtime settings (#3945)
• 2bcc153 fix(web): keep a Canvas root alive while <Activity> hides it (#3943)
• 8965ba4 fix(core): preserve visibility across Activity and Suspense hiding (#3944)
• 9ac7562 fix(core): dispose the renderer R3F creates when its root unmounts (#3942)
• 7db6056 RELEASING: Releasing 1 package(s)
• bc240cc feat(core): configure and render roots synchronously (#3925)
• f0f1cdf fix(core): don't tear down a root remounted during the unmount grace period (...
• 4ae2f81 feat: support React 19.3 (#3916)
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.103.1 to 5.104.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

• #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
• Updated dependencies []:
  • @​tanstack/query-core@​5.103.3

5.103.2

Patch Changes

• Updated dependencies [8a28904]:
  • @​tanstack/query-core@​5.103.2

Commits

• 29859ae ci: Version Packages (#11806)
• 339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
• 0a57279 test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...
• c51bb62 chore(*): declare '@​eslint-react/eslint-plugin' in the react packages and exa...
• a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
• d99c84b chore(*): update '@​eslint-react/eslint-plugin' to v5 and apply its 'recommend...
• fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
• e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
• 2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
• c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
• Additional commits viewable in compare view

Updates antd from 6.6.4 to 6.6.5

Release notes

Sourced from antd's releases.

6.6.5

• 🐞 Fix numeric 0 content rendering across Result, message, notification, Avatar, Modal, Descriptions, and Form.Item. #59153 #59125 #59289 @​bhumin18 @​nrps9909 @​QDyanbing
• Upload
  • 🐞 Fix Upload.Dragger custom style.height being overridden when the height prop is not set. #59319 @​dogledogle
  • ♿ Fix Upload file names being focusable as buttons when no preview action is available. #59295 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer calling a stale onSelectChange callback after it is replaced or removed. #59307 @​yunfeizhu
  • 🐞 Fix Transfer footer callbacks not receiving direction when using rest parameters. #59303 @​QDyanbing
• 🐞 Fix Avatar not retrying image loading after srcSet changes. #59297 @​QDyanbing
• 🐞 Fix Anchor scrolling and Table and Transfer range selection using stale values after updates. #59308 @​QDyanbing
• 🐞 Fix Select inconsistent single and multiple heights after customizing global fontSize or lineHeight. #59298 @​zombieJ
• 🤖 Fix Tooltip, Popover, Popconfirm, and Slider TypeScript definitions accepting unsupported rc Tooltip props. #59288 @​QDyanbing
• 🛎 Fix Drawer not warning that destroyOnClose is deprecated. #59299 @​dogledogle

---

• 🐞 修复 Result、message、notification、Avatar、Modal、Descriptions 和 Form.Item 无法正确渲染数值 0 内容的问题。#59153 #59125 #59289 @​bhumin18 @​nrps9909 @​QDyanbing
• Upload
  • 🐞 修复 Upload.Dragger 未设置 height 属性时自定义 style.height 被覆盖的问题。#59319 @​dogledogle
  • ♿ 修复 Upload 没有可用预览操作时文件名仍可作为按钮聚焦的问题。#59295 @​QDyanbing
• Transfer
  • 🐞 修复 Transfer 在替换或移除 onSelectChange 后仍调用旧回调的问题。#59307 @​yunfeizhu
  • 🐞 修复 Transfer 使用剩余参数的 footer 回调无法获取 direction 的问题。#59303 @​QDyanbing
• 🐞 修复 Avatar 图片加载失败后更新 srcSet 无法重新加载的问题。#59297 @​QDyanbing
• 🐞 修复 Anchor 滚动及 Table 和 Transfer 范围选择在更新后仍使用旧值的问题。#59308 @​QDyanbing
• 🐞 修复 Select 自定义全局 fontSize 或 lineHeight 后单选与多选高度不一致的问题。#59298 @​zombieJ
• 🤖 修正 Tooltip、Popover、Popconfirm 和 Slider 的 TypeScript 类型定义，避免接受实际无效的 rc Tooltip 属性。#59288 @​QDyanbing
• 🛎 修复 Drawer 未提示 destroyOnClose 已废弃的问题。#59299 @​dogledogle

Changelog

Sourced from antd's changelog.

6.6.5

2026-09-20

• 🐞 Fix numeric 0 content rendering across Result, message, notification, Avatar, Modal, Descriptions, and Form.Item. #59153 #59125 #59289 @​bhumin18 @​nrps9909 @​QDyanbing
• Upload
  • 🐞 Fix Upload.Dragger custom style.height being overridden when the height prop is not set. #59319 @​dogledogle
  • ♿ Fix Upload file names being focusable as buttons when no preview action is available. #59295 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer calling a stale onSelectChange callback after it is replaced or removed. #59307 @​yunfeizhu
  • 🐞 Fix Transfer footer callbacks not receiving direction when using rest parameters. #59303 @​QDyanbing
• 🐞 Fix Avatar not retrying image loading after srcSet changes. #59297 @​QDyanbing
• 🐞 Fix Anchor scrolling and Table and Transfer range selection using stale values after updates. #59308 @​QDyanbing
• 🐞 Fix Select inconsistent single and multiple heights after customizing global fontSize or lineHeight. #59298 @​zombieJ
• 🤖 Fix Tooltip, Popover, Popconfirm, and Slider TypeScript definitions accepting unsupported rc Tooltip props. #59288 @​QDyanbing
• 🛎 Fix Drawer not warning that destroyOnClose is deprecated. #59299 @​dogledogle

Commits

• 4a39f54 chore(deps): update dependency size-limit to v14 (#59339)
• 74f6318 chore(deps): update dependency dotenv to v18 (#59338)
• 2baea10 docs: changelog for 6.6.5 (#59333)
• 492d78e chore(deps): update codecov/codecov-action digest to 303a32d (#59334)
• 050dd0e chore(deps): update jest dependencies to v30.5.2 (#59335)
• 51dd67f chore(deps): update dependency @​size-limit/file to v14 (#59337)
• fea0690 fix(demo): use prefixCls instead of token.antCls in Table demos (#59327)
• e12b757 fix(demo): use public GetProps type in Avatar demo (#59328)
• 91a6d1d chore(workflow): run upgrade deps at 08:00 Beijing time (#59322)
• f045034 fix(Upload): keep Dragger style height when height prop is unset (#59319)
• Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.29

Release notes

Sourced from postcss's releases.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Commits

• a7a1f34 Release 8.5.29 version
• b55a36d Update dependencies
• 7647a81 Escape </style> in output of non-Root nodes (#2163)
• 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
• ebffa97 Add postcss-smooth-corners plugin
• 57d6401 Speed up source map cleaning
• 7e46a03 Speed up parser
• 7f5c417 Improve </style> protection for the case when beffore nodes have different parts
• 7ba9051 Fix useless ESLint warning
• 12b4161 Update dependencies
• Additional commits viewable in compare view

Updates react-grid-layout from 2.2.4 to 2.3.0

Release notes

Sourced from react-grid-layout's releases.

2.3.0

📚 Documentation

• touch external-drop adapter (#2281) - #2282 by @​STRML

🧪 Tests

• forwardRef on legacy Responsive and ResponsiveGridLayout (#2244) - #2277 by @​STRML
• add constrainSize to containerBounds so isBounded bounds resize (#1779) - #2278 by @​STRML
• collision resolution for free-form, wrap, and y:Infinity (#1982 #2161 #2252) - #2279 by @​STRML
• GridItem memoization, touch scroll, edge auto-scroll, drop scroll (#2240 #1793 #2232 #2143 #2203) - #2280 by @​STRML
• build: bump react-resizable to ^3.2.0 + record out-of-scope decisions - #2276 by @​STRML
• touch external-drop adapter (#2281) - #2282 by @​STRML
• dedup drop pipeline between desktop and touch - #2284 by @​STRML
• re-seed size from data-grid when a responsive layout is generated (#2110) - #2283 by @​STRML
• verify #1744 gap collapse through the component path - #2285 by @​STRML
• bound resize to the container edge in isBounded grids (#1779) - #2286 by @​STRML
• do not fire onLayoutChange mid-external-drag (#2219) - #2287 by @​STRML
• forward allowMobileScroll through ResponsiveReactGridLayout (#1793) - #2289 by @​STRML
• add debounceTimeout option to useContainerWidth (#2254) - #2290 by @​STRML
• end drag when mouseup arrives before the drag start renders (#2291) - #2292 by @​maricastroc

🔧 Internal Changes

• add deterministic Playwright e2e harness and expand CI - #2275 by @​STRML

• build: bump react-resizable to ^3.2.0 + record out-of-scope decisions - #2276 by @​STRML

• bump follow-redirects from 1.15.11 to 1.16.1 - #2261 by @​dependabot[bot]

• bump flatted from 3.3.3 to 3.4.4 - #2257 by @​dependabot[bot]

• style: ignore codemaps in prettier so fmt:check passes - #2293 by @​STRML

Changelog

Sourced from react-grid-layout's changelog.

2.3.0 (Oct 5, 2026)

New Features

• useContainerWidth: New optional debounceTimeout (ms). While the container keeps resizing, the reported width holds. Once it has been steady for debounceTimeout ms, the latest width commits once per burst. Leave it unset or 0 to keep the immediate behavior. #2254, #2290
• DropConfig: Drop-from-outside now works on touch devices (iOS Safari, Android Chrome), where dragover and drop never fire. Mark a source element with data-rgl-draggable and touch events drive the same drop pipeline as the mouse. New options: dropConfig.touchEnabled (default true) and dropConfig.touchDragSource (default [data-rgl-draggable]). #2281
• DragConfig: New dragConfig.allowMobileScroll. react-draggable calls preventDefault on touchstart unless this is set, which suppressed child onClick on touch devices. The v1 flat allowMobileScroll prop works too, and ResponsiveReactGridLayout now forwards it. It used to drop the prop silently. #1793, #2289
• Edge auto-scroll: Dragging near the edge of a scrollable ancestor, or of the grid itself, now scrolls it from a requestAnimationFrame loop. Desktop browsers already scrolled near the edge on their own since 2.1.0. This covers fixed-height grids and touch. The scroll container is found by walking up from the dragged node, so an unpositioned overflow: auto wrapper works. #2232

Performance

• GridItem: Now wrapped in React.memo with a shallow comparison of geometry and config, so a drag or resize no longer re-renders every item. You need to memoize the children you pass to the grid. #2240

Bug Fixes

• Drag: Fix a drag that never ended when you released the mouse before the drag-start render committed. onDragStop now fires and the placeholder is removed. It checked the activeDrag state, which was still null at that point. It now checks the drag item saved at drag start. #2291, #2292
• onLayoutChange: No longer fires during external drags (HTML5 or touch). The dropping placeholder entered and left the layout on every drag-enter and drag-leave without setting activeDrag, so the layout-change effect fired each time. #2219
• isBounded: Resizing an item in a bounded grid could push its bottom or right edge past the container. GridItem passed a container height of 0 to the constraint context, so containerBounds never clamped. It now measures the container, and containerBounds gains a constrainSize. #1779
• Responsive: An item added at a smaller breakpoint through data-grid kept its small width when the container grew to a larger breakpoint. The generated layout cloned the smaller one and never re-read the size. The size now re-seeds from data-grid for generated layouts. Stored layouts and x/y positions are untouched. #2110
• Legacy API: Responsive and ResponsiveGridLayout forward refs again. v1's Responsive was a class that accepted a ref, and the v2 function component dropped it. The ref goes to innerRef. #2244
• Collisions: In free-form (no compaction) grids, a swap on a partial overlap pushed the lower item a full item height. It now sits at the dragged item's bottom. #1982. In wrap mode, dragging left onto an occupied cell left items overlapping. Wrap now resolves collisions like horizontal (push right), and the final wrap compactor reflows to reading order. #2252
• Drop position: A scrolled grid placed an external drop above the cursor by scrollTop. The drop position now adds the grid's scrollLeft and scrollTop. #2143
• correctBounds: A new item with y: Infinity was only clamped under the vertical compactor. Horizontal and no compaction let it into the render math, and it overlapped the top-left. It now clamps to the layout bottom. #2161
• Resize: Bump react-resizable to ^3.2.0, which fixes resize handle drift under load (stale props between renders). The API is unchanged. #2233

Internal Changes

• Deterministic Playwright e2e harness, with expanded CI.
• The mouse and touch drop paths share one position calculation (dropMath.ts).
• Architecture docs moved to codemaps/, which Prettier now ignores. #2293
• Lockfile bumps: follow-redirects 1.16.1 (#2261) and flatted 3.4.4 (#2257).

Commits

• 9b01a61 release 2.3.0
• 24533b1 chore(deps): bump flatted from 3.3.3 to 3.4.4 (#2257)
• e87a821 chore(deps): bump follow-redirects from 1.15.11 to 1.16.1 (#2261)
• eb35b82 fix: end drag when mouseup arrives before the drag start renders (#2291) (#2292)
• b5fbb95 style: ignore codemaps in prettier so fmt:check passes (#2293)
• cbac265 docs: note #2289 allowMobileScroll forwarding and #2254 debounceTimeout in co...
• a44fb5f docs: commit codemaps, add AGENTS.md, graphify ignore
• 234fe13 Merge pull request #2290 from react-grid-layout/feat/2254-usecontainerwidth-d...
• 2bcd964 feat: add debounceTimeout option to useContainerWidth (#2254)
• 44eb5dd Merge pull request #2289 from react-grid-layout/fix/1793-responsive-allow-mob...
• Additional commits viewable in compare view

Updates three from 0.186.0 to 0.186.1

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🟡 Minor bump — auto-merge not enabled.

Per dependabot-auto-handler policy, only semver-patch Dependabot PRs auto-merge once CI is green.
Major and minor bumps touch APIs and require human review.

Posted by dependabot-auto-handler workflow

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.