build(deps): bump the npm-prod-minor-patch group across 1 directory with 10 updates

[dependabot]

Bumps the npm-prod-minor-patch group with 10 updates in the / directory:

Package	From	To
@codemirror/view	6.43.6	6.43.7
@fontsource-variable/inter	5.2.8	5.3.0
@fontsource/jetbrains-mono	5.2.8	5.3.0
@hugeicons/core-free-icons	4.2.2	4.2.3
@radix-ui/react-use-controllable-state	1.2.3	1.2.6
@tanstack/react-virtual	3.14.6	3.14.8
@tauri-apps/plugin-store	2.4.3	2.4.4
radix-ui	1.6.2	1.6.7
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8

Updates @codemirror/view from 6.43.6 to 6.43.7

Commits

• See full diff in compare view

Updates @fontsource-variable/inter from 5.2.8 to 5.3.0

Commits

• See full diff in compare view

Updates @fontsource/jetbrains-mono from 5.2.8 to 5.3.0

Commits

• See full diff in compare view

Updates @hugeicons/core-free-icons from 4.2.2 to 4.2.3

Updates @radix-ui/react-use-controllable-state from 1.2.3 to 1.2.6

Changelog

Sourced from @​radix-ui/react-use-controllable-state's changelog.

1.2.6

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-use-effect-event@0.0.5, @radix-ui/react-use-layout-effect@1.1.4

1.2.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-use-effect-event@0.0.4, @radix-ui/react-use-layout-effect@1.1.3

1.2.4

• Fix dev-only checks with conditional exports to drop dev-warnings from production builds.
• Updated dependencies: @radix-ui/primitive@1.1.6, @radix-ui/react-use-effect-event@0.0.3, @radix-ui/react-use-layout-effect@1.1.2

Commits

• See full diff in compare view

Updates @tanstack/react-virtual from 3.14.6 to 3.14.8

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.8

Patch Changes

• #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

• Updated dependencies [7ae32b5]:

  • @​tanstack/virtual-core@​3.17.6

@​tanstack/react-virtual@​3.14.7

Patch Changes

• Updated dependencies [1e3b908, 7dcfc07]:
  • @​tanstack/virtual-core@​3.17.5

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.8

Patch Changes

• #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

• Updated dependencies [7ae32b5]:

  • @​tanstack/virtual-core@​3.17.6

3.14.7

Patch Changes

• Updated dependencies [1e3b908, 7dcfc07]:
  • @​tanstack/virtual-core@​3.17.5

Commits

• 32b2f2b ci: Version Packages (#1238)
• aa536e7 fix(react-virtual): grow size container before scroll sync on end-anchored pr...
• 87f689a ci: Version Packages (#1231)
• ba5c47a feat(angular-virtual): add chat example and require Angular 20 (#1228)
• See full diff in compare view

Updates @tauri-apps/plugin-store from 2.4.3 to 2.4.4

Release notes

Sourced from @​tauri-apps/plugin-store's releases.

barcode-scanner-js v2.4.4

[2.4.4]

• 82fbb0c7 (#3221) On iOS, fixed an application crash happening when the scanner was started when user denied permission before.
• b60dd887 (#3223) On iOS, start the scanning session on a separate thread to fix performance issues.
• c27af912 (#3222) On iOS, fixed an application crash happening when the scanner was started on the iOS Simulator (no camera available).

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.4.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 2.2kB dist-js/index.cjs
npm notice 1.6kB dist-js/index.d.ts
npm notice 2.1kB dist-js/index.js
npm notice 755B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-barcode-scanner
npm notice version: 2.4.4
npm notice filename: tauri-apps-plugin-barcode-scanner-2.4.4.tgz
npm notice package size: 3.4 kB
npm notice unpacked size: 10.9 kB
npm notice shasum: bda41aa1a4d30e40dfc0ff9411491120a9b7d283
npm notice integrity: sha512-uXvyMI8UgQjSr[...]OvlkfOr21fo6g==
npm notice total files: 6
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=908169614
+ @tauri-apps/plugin-barcode-scanner@2.4.4

barcode-scanner v2.4.4

[2.4.4]

• 82fbb0c7 (#3221) On iOS, fixed an application crash happening when the scanner was started when user denied permission before.
• b60dd887 (#3223) On iOS, start the scanning session on a separate thread to fix performance issues.
• c27af912 (#3222) On iOS, fixed an application crash happening when the scanner was started on the iOS Simulator (no camera available).

... (truncated)

Commits

• e7a68fa publish new versions (#3068)
• b5550a3 chore: temp delete updater changefile
• 93426f8 fix: fix docsrs builds
• 4ee61e0 Revert "chore: temp delete updater changefile"
• See full diff in compare view

Updates radix-ui from 1.6.2 to 1.6.7

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

• Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

1.6.4

• Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.

1.6.3

Dialog

• Fixed broken ARIA references in Dialogs where title or description elements are not rendered.

Slider

• Fixed a bug where onValueCommit was not called when a slider thumb was dragged across another thumb.

Toast

• Fixed Toast removing non-focused toasts when pressing Escape.

Tooltip

• Fixed a bug where Tooltip.Content children were mounted to the DOM twice.

Other updates

• Fixed overriding inline animation style in Popper.Content.
• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Widened virtualRef prop type to allow RefObject<Measurable | null> in popover components.
• Fixed dev-only checks with conditional exports to drop dev-warnings from production builds.
• Added per-primitive subpath entry points so each primitive can be imported directly, eg. import { Accordion } from 'radix-ui/accordion' or import * as Accordion from 'radix-ui/accordion'. This mirrors the namespaced exports available from the root radix-ui entry point.
• Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

Commits

• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions