chore(deps): bump the npm-minor-patch group in /frontend with 16 updates#205
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm-minor-patch group in /frontend with 16 updates#205dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the npm-minor-patch group in /frontend with 16 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.96.1` | | [framer-motion](https://github.com/motiondivision/motion) | `12.34.3` | `12.38.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.71.2` | `7.72.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.7.0` | `4.8.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.1` | `7.13.2` | | [recharts](https://github.com/recharts/recharts) | `3.7.0` | `3.8.1` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.2.1` | `4.2.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.5.0` | | [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.2.3` | `4.3.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.18` | `4.1.2` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.7.0` | `20.8.9` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.1` | `4.2.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.1` | `8.58.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.2` | Updates `@tanstack/react-query` from 5.90.21 to 5.96.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.96.1/packages/react-query) Updates `framer-motion` from 12.34.3 to 12.38.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.34.3...v12.38.0) Updates `react-hook-form` from 7.71.2 to 7.72.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.71.2...v7.72.0) Updates `react-resizable-panels` from 4.7.0 to 4.8.0 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.7.0...4.8.0) Updates `react-router-dom` from 7.13.1 to 7.13.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.13.2/packages/react-router-dom) Updates `recharts` from 3.7.0 to 3.8.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.7.0...v3.8.1) Updates `@playwright/test` from 1.58.2 to 1.59.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.59.1) Updates `@tailwindcss/postcss` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/@tailwindcss-postcss) Updates `@types/node` from 25.3.3 to 25.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react-swc` from 4.2.3 to 4.3.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/v4.3.0/packages/plugin-react-swc) Updates `@vitest/coverage-v8` from 4.0.18 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-v8) Updates `happy-dom` from 20.7.0 to 20.8.9 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.7.0...v20.8.9) Updates `postcss` from 8.5.6 to 8.5.8 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.8) Updates `tailwindcss` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss) Updates `typescript-eslint` from 8.56.1 to 8.58.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/typescript-eslint) Updates `vitest` from 4.0.18 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.96.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: framer-motion dependency-version: 12.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-hook-form dependency-version: 7.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-resizable-panels dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-router-dom dependency-version: 7.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: recharts dependency-version: 3.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@playwright/test" dependency-version: 1.59.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@tailwindcss/postcss" dependency-version: 4.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@types/node" dependency-version: 25.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@vitejs/plugin-react-swc" dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: happy-dom dependency-version: 20.8.9 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: postcss dependency-version: 8.5.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: tailwindcss dependency-version: 4.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: typescript-eslint dependency-version: 8.58.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vitest dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
area:frontend
dependabot
bot
added
area:frontend
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| "typescript-eslint": "^8.58.0", | ||
| "vite": "^7.3.1", | ||
| "vitest": "^4.0.18" | ||
| } |
There was a problem hiding this comment.
vitest minimum version not bumped alongside @vitest/coverage-v8
The PR description lists vitest as being bumped from 4.0.18 to 4.1.2, and @vitest/coverage-v8 was correctly updated to ^4.1.2 — but vitest itself still reads ^4.0.18 in package.json. The lockfile resolves both to 4.1.2 so there is no functional breakage, but a fresh npm install without the lockfile could legitimately install any 4.x release from 4.0.18 onwards and create a version mismatch between vitest and @vitest/coverage-v8.
Suggested change
| } | |
| "vitest": "^4.1.2" |
Prompt To Fix With AI
This is a comment left during a code review.
Path: frontend/package.json
Line: 102
Comment:
**`vitest` minimum version not bumped alongside `@vitest/coverage-v8`**
The PR description lists `vitest` as being bumped from `4.0.18` to `4.1.2`, and `@vitest/coverage-v8` was correctly updated to `^4.1.2` — but `vitest` itself still reads `^4.0.18` in `package.json`. The lockfile resolves both to `4.1.2` so there is no functional breakage, but a fresh `npm install` without the lockfile could legitimately install any `4.x` release from `4.0.18` onwards and create a version mismatch between `vitest` and `@vitest/coverage-v8`.
```suggestion
"vitest": "^4.1.2"
```
How can I resolve this? If you propose a fix, please make it concise.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-patch group in /frontend with 16 updates:
5.90.215.96.112.34.312.38.07.71.27.72.04.7.04.8.07.13.17.13.23.7.03.8.11.58.21.59.14.2.14.2.225.3.325.5.04.2.34.3.04.0.184.1.220.7.020.8.98.5.68.5.84.2.14.2.28.56.18.58.04.0.184.1.2Updates
@tanstack/react-queryfrom 5.90.21 to 5.96.1Release notes
Sourced from
@tanstack/react-query's releases.... (truncated)
Changelog
Sourced from
@tanstack/react-query's changelog.... (truncated)
Commits
75052a7ci: Version Packages (#10370)73e783bci: Version Packages (#10364)14a97b7test(react-query): replace 'import React' with 'import * as React' in 'usePre...fd8c068test({react,preact}-query/useSuspenseQueries): merge redundant second 'descri...f168555test({react,preact,solid}-query): move 'queryClient' and 'queryCache' to 'bef...afb5812test({react,preact}-query/useSuspenseQueries): inline test helpers, remove sh...9e1bb94test(react-query/useSuspenseQueries): remove unnecessary 'act' wrapper from b...55cee0atest({react,preact}-query/useSuspenseQueries): add test for not suspending bu...7fc6e6atest({react,preact}-query/useSuspenseQueries): add test for not suspending bu...1047cdcci: Version Packages (#10326)Updates
framer-motionfrom 12.34.3 to 12.38.0Changelog
Sourced from framer-motion's changelog.
... (truncated)
Commits
0bfc9fev12.38.0343cb0cUpdating layoutAnchoree99ad2Updating changelog062660bUpdating changgelog303da7dUpdating readmeb075adcMerge pull request #3647 from motiondivision/feat/layout-anchorf0991d6Add missing layoutAnchor !== false guard in attemptToResolveRelativeTargetb5798e9Merge pull request #3642 from motiondivision/worktree-fix-issue-30787686c19Merge pull request #3636 from motiondivision/worktree-fix-issue-3061a95c487Fix auto-scroll in reorder-virtualized test pageUpdates
react-hook-formfrom 7.71.2 to 7.72.0Release notes
Sourced from react-hook-form's releases.
Commits
1fecf737.72.0f5373fe🌉 allow subscribe formState to track submit state (#13319)f5deec5📖 chore: update issue template CodeSandbox links (#13315)3f4d0f3🐞 fix #13300 checkbox form valdiation ignored with native valdiation (#13310)2e8f081🐞 fix: prevent useFieldArray from marking unrelated fields as dirty (#13299)6067c3f⚓️ feat: build-in form level validate (#13195)Updates
react-resizable-panelsfrom 4.7.0 to 4.8.0Release notes
Sourced from react-resizable-panels's releases.
Changelog
Sourced from react-resizable-panels's changelog.
Commits
1e299c34.7.6 -> 4.8.009bec23Import version 3 saved layouts in version 4 (#699)1adf716Update CONTRIBUTING.mdbf4f8c64.7.5 -> 4.7.6d7e4d97ReplacePanelaria-disabledattribute withdata-disabled(#698)ebf443dUpgrade react-lib-tools225be97Upgrade react-lib-tools57bf680Tweaked defaultSize warning wording6e41d824.7.4 -> 4.7.55941ff3Improved server rendering support fordefaultSizeprop (#696)Updates
react-router-domfrom 7.13.1 to 7.13.2Changelog
Sourced from react-router-dom's changelog.
Commits
aadb56fchore: Update version for release (#14908)c68a9b3chore: Update version for release (pre) (#14893)Updates
rechartsfrom 3.7.0 to 3.8.1Release notes
Sourced from recharts's releases.
... (truncated)
Commits
5b10788chore(deps-dev): bump diff from 8.0.3 to 8.0.4 (#7156)222396fchore(deps): bump react-router-dom from 7.13.1 to 7.13.2 (#7164)c2642dachore(deps-dev): bump typescript-eslint from 8.57.1 to 8.57.2 (#7166)b186929fix(RechartsWrapper): prevent ResizeObserver memory leak on ref update (#7161)738f71ffix(Tooltip): prevent crash on sparse or undefined payload entries (#7149)00daf0bchore(deps-dev): bump rollup from 4.59.0 to 4.60.0 (#7158)eba4f2achore(deps-dev): bump marked from 17.0.4 to 17.0.5 (#7157)201d060fix: resolve keyboard navigation and tooltip issues for Pie charts (#6921) (#...670d092chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#7150)86ca8defix: stackOffset expand should not override numerical XAxis domain (#7152)Maintainer changes
This version was pushed to npm by corkscreewe, a new releaser for recharts since your current version.
Updates
@playwright/testfrom 1.58.2 to 1.59.1Release notes
Sourced from
@playwright/test's releases.... (truncated)
Commits
d466ac5chore: mark v1.59.1 (#40005)530e7e5cherry-pick(#4004): fix(cli): kill-all should kill dashboard9aa216ccherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...01b2b15cherry-pick(#39980): chore: more release notes fixesa5cb6c9cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs99a17b5cherry-pick(#39975): chore: support opening .trace files via .link indirection43607c3cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.462cabe1cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)0c65a75cherry-pick(#39968): chore: screencast.showActions apif04155bcherry-pick(#39958): chore: release notes for langs v1.59Updates
@tailwindcss/postcssfrom 4.2.1 to 4.2.2Release notes
Sourced from
@tailwindcss/postcss's releases.Changelog
Sourced from
@tailwindcss/postcss's changelog.Commits
d596b0c4.2.2 (#19821)faa5e88Cleanup inconsistencies related to (regex) escapes (#19804)Updates
@types/nodefrom 25.3.3 to 25.5.0Commits
Updates
@vitejs/plugin-react-swcfrom 4.2.3 to 4.3.0Release notes
Sourced from
@vitejs/plugin-react-swc's releases.Changelog
Sourced from
@vitejs/plugin-react-swc's changelog.Commits
Updates
@vitest/coverage-v8from 4.0.18 to 4.1.2Release notes
Sourced from
@vitest/coverage-v8's releases.... (truncated)
Commits
fc6f482chore: release v4.1.21f2d318chore: release v4.1.1aaf9f18fix(coverage): simplify provider types (#9931)4150b91chore: release v4.1.00c2c013chore: release v4.1.0-beta.6689a22afix(browser): types ofgetCDPSessionandcdp()(#9716)94eb73bchore(deps): update eslint packages (#9615)8c96bb0refator: update links to npmx (#9783)aaf7758chore: standardize packages README (#9776)57cbe39chore(deps): updateast-v8-to-istanbulto v1 (#9755)Updates
happy-domfrom 20.7.0 to 20.8.9Release notes
Sourced from happy-dom's releases.
Commits
68324c2fix: #2117 Fixes issue related to cookies from the current origin being for...5437fdffix: #2113 Fixes issue where export names can be interpolated as executable...7e97acbf...Description has been truncated
Greptile Summary
This is a routine automated dependency bump from Dependabot, updating 16 packages in the
/frontenddirectory with minor and patch version increments. All updates are low-risk; notably,happy-dom(20.7.0 → 20.8.9) addresses two security advisories (GHSA-w4gp-fjgq-3q4g: cross-origin cookie leakage, and GHSA-6q6h-j7hj-3r64: ESM VM escape in CommonJS), and@vitest/coverage-v8(4.0.18 → 4.1.2) resolves aflattedCVE. Merging this PR is encouraged to bring in those security patches.Key changes:
happy-domfixes two CVEs (cross-origin cookie forwarding and ESM code injection);@vitest/coverage-v8removes a pinned vulnerableflattedversion.react-hook-form7.72.0 adds built-in form-level validation;react-resizable-panels4.8.0 addsuseDefaultLayoutwith legacy-layout migration;framer-motion12.38.0 addslayoutAnchor, axis-locked layout animations, and severalAnimatePresencefixes.@playwright/test1.59.1 fixes a Windows regression from 1.59.0 (brokencodegen/--uicommands).vitestinpackage.jsonwas not bumped from^4.0.18to^4.1.2to match@vitest/coverage-v8; the lockfile compensates, but it is worth aligning the minimum version.Confidence Score: 5/5
Safe to merge — all updates are minor/patch bumps with no breaking changes; security fixes in happy-dom and vitest coverage make this actively beneficial.
The sole finding is a P2 style inconsistency (vitest minimum version in package.json not bumped to match the lockfile resolution). The lockfile correctly pins both packages to 4.1.2, so there is no functional impact. Security patches and no breaking changes in the upgrade set justify a confident merge recommendation.
No files require special attention; the only note is the
vitestversion constraint infrontend/package.jsonline 102.Important Files Changed
vitestminimum version not updated in package.json (stays at^4.0.18) while@vitest/coverage-v8is bumped to^4.1.2, creating a minor inconsistency.Flowchart
%%{init: {'theme': 'neutral'}}%% flowchart TD A[Dependabot PR - 16 npm bumps] --> B{Category} B --> C[Runtime deps] B --> D[Dev/Test deps] C --> C1["@tanstack/react-query 5.96.1\nframer-motion 12.38.0\nreact-hook-form 7.72.0\nreact-resizable-panels 4.8.0\nreact-router-dom 7.13.2\nrecharts 3.8.1"] D --> D1["@playwright/test 1.59.1\n@tailwindcss/postcss 4.2.2\n@types/node 25.5.0\n@vitejs/plugin-react-swc 4.3.0\npostcss 8.5.8\ntailwindcss 4.2.2\ntypescript-eslint 8.58.0\nvitest 4.1.2 (lockfile only)"] D --> D2["⚠️ Security patches\nhappy-dom 20.8.9 - 2 CVEs fixed\n@vitest/coverage-v8 4.1.2 - flatted CVE"] style D2 fill:#f96,color:#000Prompt To Fix All With AI
Reviews (1): Last reviewed commit: "chore(deps): bump the npm-minor-patch gr..." | Re-trigger Greptile