Skip to content

chore(deps-fe)(deps): bump @tanstack/react-query from 5.103.2 to 5.104.0 in /frontend in the frontend-framework group - #635

Merged
Opselon merged 3 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-framework-dc810b5271
Oct 5, 2026
Merged

Opselon merged 3 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-framework-dc810b5271

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-framework group in /frontend with 1 update: @tanstack/react-query.

Updates @tanstack/react-query from 5.103.2 to 5.104.0

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-devtools@​5.104.0
    • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/react-query@​5.104.0
    • @​tanstack/query-persist-client-core@​5.104.0

@​tanstack/react-query@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0

@​tanstack/react-query-devtools@​5.103.3

Patch Changes

@​tanstack/react-query-next-experimental@​5.103.3

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

  • #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
  • Updated dependencies []:
    • @​tanstack/query-core@​5.103.3
Commits
  • d4033eb ci: Version Packages (#11651)
  • 5279b05 chore(deps): update Vite from v6 to v8 (#11650)
  • fe053bf ci: Version Packages (#11612)
  • 1c9693e fix(codemods): update codemods build script (#11647)
  • f00aad6 chore(deps): update dev dependencies (#11640)
  • 2443290 test(*): rename 'console.error' spies to 'consoleErrorMock' (#11646)
  • fcab29f test({query-core,react-query,preact-query}): restore the previous 'isServer' ...
  • e8dacbe docs({react-query,preact-query,solid-query,svelte-query}/README): point the C...
  • 57f40eb chore(deps): update non-major dependencies (#11625)
  • 397ad07 test({query-core,react-query,preact-query,solid-query}): pass 'unhandledRejec...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend-framework group in /frontend with 1 update: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query).


Updates `@tanstack/react-query` from 5.103.2 to 5.104.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.0/packages/react-query)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-framework
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@dependabot
dependabot Bot requested a review from Opselon as a code owner October 4, 2026 04:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@socket-security

socket-security Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​tanstack/​react-query@​5.103.2 ⏵ 5.104.099 +11009198100

View full report

@github-actions

github-actions Bot commented Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

🔴 NSE Evidence Report — #635

Status: FAIL · Branch: dependabot/npm_and_yarn/frontend/frontend-framework-dc810b5271 → main · HEAD: f88912b55853

🔗 Revision

Source SHA
PR HEAD f88912b55853
Local unknown
CI f88912b55853

Overall

🔴 FAIL

Required CI checks contain failures.

Primary affected files:

  1. dynamic/agents/github-advanced-security
  2. Processing Request

🧪 Test Matrix

Gate Status Passed Failed Skipped Duration
Aggregate CI Results ⏭️ — 0 — —
Heavy CI (${{ matrix.suite }}) ⏭️ — 0 — 0s
Extended Validation (Tier 2) ⏭️ — 0 — 0s
Full Runtime Overall Verdict ✅ — 0 — 7s
DB Fabric Certification (SQLite ↔ PostgreSQL) ✅ — 0 — 3m33s
Trivy ✅ — 0 — 2s
CodeQL ✅ — 0 — 2s
Deploy GitHub Pages ⏭️ — 0 — —
osv-scanner ✅ — 0 — 2s
Socket Security: Pull Request Alerts ✅ — 0 — 14s
github-advanced-security ❌ — 1 — 34s
Py Tests (windows-latest) ✅ — 0 — 3m00s
Py Tests (macos-latest) ✅ — 0 — 18s
OSV Scanner / osv-scan ✅ — 0 — 35s
Go API (ubuntu-latest) ✅ — 0 — 28s
React ↔ Go API Contract (Ubuntu) ✅ — 0 — 50s
Trivy Vulnerability Scan ✅ — 0 — 31s
Validate documentation ✅ — 0 — 9s
Go API (windows-latest) ✅ — 0 — 1m34s
Full NSE Runtime (sqlite) ✅ — 0 — 4m46s
Code Quality & Tests ✅ — 0 — 11m31s
Dependency Manifest Diff ✅ — 0 — 9s
Migration safety (fail-loud + version postconditions) ✅ — 0 — 32s
MetaTrader 5 Wine Runtime ✅ — 0 — 7m57s
Full NSE Runtime (postgres) ✅ — 0 — 5m06s
Frontend JS Unit Tests ✅ — 0 — 25s
CodeQL Analysis ✅ — 0 — 1m28s
Dependency drift (lock vs pyproject) ✅ — 0 — 10s
CI Integrity and Change Classification ✅ — 0 — 12s
Socket Security: Project Report ✅ — 0 — 2s

🔴 Affected Files

Processing Request

  • Processing Request
    • SessionModelError
    • CI: github-advanced-security

dynamic/agents/github-advanced-security

  • dynamic/agents/github-advanced-security
    • CI: github-advanced-security
    • Failed step: Processing Request (Linux)

🔴 What Failed and Why

1. Processing Request (Linux)

Severity: ERROR

Where: dynamic/agents/github-advanced-security

Failed step: Processing Request (Linux)

Kind: SECURITY_FINDING

Result / Why:

Process completed with exit code 1.

CI: github-advanced-security (logs)

Evidence: source github-checks, via github-checks

2. SessionModelError

Where: Processing Request

Kind: CI_FAILURE

Error / rule: SessionModelError

Result / Why:

Error creating PR review request: SessionModelError: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E); cause: Error: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E) (errorDetails: {"configurationError":false,"stack":"SessionModelError: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E)\n    at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)\n    at runNextTicks (node:internal/process/task_queues:65:5)\n    at process.processImmediate (node:internal/timers:541:9)\n    at async file:///home/runner/work/_temp/***-action-main/dist-autofind-t …

Trace:

Error creating PR review request: SessionModelError: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E); cause: Error: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E) (errorDetails: {"configurationError":false,"stack":"SessionModelError: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E)\n    at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)\n    at runNextTicks (node:internal/process/task_queues:65:5)\n    at process.processImmediate (node:internal/timers:541:9)\n    at async file:///home/runner/work/_temp/***-action-main/dist-autofind-t …
Reporting error to sweagentd...
Error successfully reported to sweagentd session.
Error successfully reported to sweagentd backend.
eb [SessionModelError]: You have exceeded your monthly quota (Request ID: F407:170F43:4B8586:5E2CCD:6AC41A7E)
at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)
at runNextTicks (node:internal/process/task_queues:65:5)
at process.processImmediate (node:internal/timers:541:9)
at async file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1003:8471
at async jp (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1003:8529)
at async Zn (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10473)
at async QR (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1600:1365)
at async MF (file:///home/runner/wo …

CI: github-advanced-security (logs)

Evidence: source job-logs, via job-logs

⚠️ Warnings

1. Full Runtime Overall Verdict

Severity: WARNING

Where: unknown

Result / Details:

sqlite has warnings; inspect provider_runtime_soak.json

CI: Full Runtime Overall Verdict (logs)

Evidence: source github-checks, via github-checks

2. Full Runtime Overall Verdict

Severity: WARNING

Where: unknown

Result / Details:

postgres has warnings; inspect provider_runtime_soak.json

CI: Full Runtime Overall Verdict (logs)

Evidence: source github-checks, via github-checks

3. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:16.110+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

4. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:12.089+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

5. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:12.080+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

6. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:08.073+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

7. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:08.063+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

8. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:04.051+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

9. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:04.041+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

10. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:01.453+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

11. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:46:01.443+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

12. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:45:56.597+03:30 [warning  ] [LATENCY_REGRESSION] event=E2E_P95_REGRESSED p95_ms=77.968 budget_p95_ms=75.0 epochs=1 [nexus_scalp.application.live.inference]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

13. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:16.484+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

14. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:16.407+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

15. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:12.447+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

16. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:12.372+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

17. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:08.400+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

18. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:08.324+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

19. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:04.382+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

20. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:04.308+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

21. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:02.280+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

22. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:43:02.205+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

🏗️ CI Jobs

Workflow Job Status Details
CI Aggregate CI Results ⏭️ SKIPPED logs
CI Heavy CI (${{ matrix.suite }}) ⏭️ SKIPPED logs
CI Extended Validation (Tier 2) ⏭️ SKIPPED logs
CI Full Runtime Overall Verdict ✅ SUCCESS logs
CI DB Fabric Certification (SQLite ↔ PostgreSQL) ✅ SUCCESS logs
GitHub Advanced Security Trivy ✅ SUCCESS logs
GitHub Advanced Security CodeQL ✅ SUCCESS logs
Docs Deploy GitHub Pages ⏭️ SKIPPED logs
GitHub Advanced Security osv-scanner ✅ SUCCESS logs
Socket Security Socket Security: Pull Request Alerts ✅ SUCCESS logs
Code scanning AI findings on PR #635 github-advanced-security ❌ FAILURE logs
Tests (OS Matrix) Py Tests (windows-latest) ✅ SUCCESS logs
Tests (OS Matrix) Py Tests (macos-latest) ✅ SUCCESS logs
OSV Dependency Scan OSV Scanner / osv-scan ✅ SUCCESS logs
Go API Go API (ubuntu-latest) ✅ SUCCESS logs
Go API React ↔ Go API Contract (Ubuntu) ✅ SUCCESS logs
Security Trivy Vulnerability Scan ✅ SUCCESS logs
Docs Validate documentation ✅ SUCCESS logs
Go API Go API (windows-latest) ✅ SUCCESS logs
CI Full NSE Runtime (sqlite) ✅ SUCCESS logs
CI Code Quality & Tests ✅ SUCCESS logs
Lockfile Diff Dependency Manifest Diff ✅ SUCCESS logs
Dependency Lock & Migration Safety Migration safety (fail-loud + version postconditions) ✅ SUCCESS logs
CI MetaTrader 5 Wine Runtime ✅ SUCCESS logs
CI Full NSE Runtime (postgres) ✅ SUCCESS logs
JS Tests Frontend JS Unit Tests ✅ SUCCESS logs
Security CodeQL Analysis ✅ SUCCESS logs
Dependency Lock & Migration Safety Dependency drift (lock vs pyproject) ✅ SUCCESS logs
CI CI Integrity and Change Classification ✅ SUCCESS logs
Socket Security Socket Security: Project Report ✅ SUCCESS logs

🟢 Final Verdict — Merge? Yes

Every merge precondition observed is satisfied:

  • 1 check(s) not green: github-advanced-security — the base branch's required list could not be read, so GitHub's own mergeability answer is used instead.
  • Not observed: which checks the base branch requires, required-review count — could not be read.
  • GitHub reports this PR is mergeable, which already accounts for the unreadable rules above.

NSE Evidence Report — generated by nse pr report. Statuses are deterministic: 🟢 PASS · 🟡 IN PROGRESS · 🟠 BLOCKED · 🔴 FAIL · ⚪ UNKNOWN. unknown = the evidence did not determine it. This comment is updated in place; it never duplicates.

Dependabot bumps pyproject.toml ranges but cannot run uv pip compile,
so the compiled artifacts must ship in the same PR (see
.github/dependabot.yml lockfile-safe contract). Regenerated with
uv 0.12.10 --python-version 3.11.
@Opselon
Opselon merged commit 19d1c12 into main Oct 5, 2026
29 of 30 checks passed
@Opselon
Opselon deleted the dependabot/npm_and_yarn/frontend/frontend-framework-dc810b5271 branch October 5, 2026 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant