build(deps): bump the spa-deps group in /desktop with 3 updates

[dependabot]

Bumps the spa-deps group in /desktop with 3 updates: @codemirror/state, @codemirror/view and react-konva.

Updates @codemirror/state from 6.7.4 to 6.7.5

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.11 to 6.43.12

Commits

• See full diff in compare view

Updates react-konva from 19.2.7 to 19.3.0

Release notes

Sourced from react-konva's releases.

19.3.0: React 19.3 support

Upgrade requirements

Upgrade React and React DOM to matching 19.3 versions before you install this release. The minimum React and React DOM version is now 19.3.0.

npm install react@19.3.0 react-dom@19.3.0 react-konva@19.3.0

For React 19.2 projects, pin react-konva to ~19.2.7. The range ^19.2.7 also allows 19.3.0, which requires the React upgrade. For React 18 projects, use the React Konva 18 release line.

Fixes and improvements

• Fixes the useActionState crash inside Stage with React 19.3. This resolves #859 through #860.
• Updates the bundled react-reconciler to 0.34.0 and scheduler to 0.28.0 for React 19.3.
• Canvas roots inherit React StrictMode checks from the DOM tree.
• Activity and Suspense preserve canvas state and node identity through hiding and reveal. Effects and refs disconnect and reconnect as each boundary requires.
• Stage removal discards pending child updates and runs effect cleanup, including for hidden Stages.
• Canvas components read the surrounding DOM form status through useFormStatus, including the submitted data and action.
• useId values remain stable on updates and distinct across DOM and Stage roots.
• Both package formats register with React DevTools. Development builds support hook state changes.

Renderer boundaries

Error boundaries inside Stage handle canvas errors and display Konva fallbacks. DOM error boundaries around Stage do not catch errors from canvas children. Uncaught canvas errors appear in the console with the original error and component stack, including errors during cleanup.

Canvas Suspense boundaries display Konva fallbacks. Canvas suspension does not activate a surrounding DOM Suspense boundary. A promise read before Stage renders can activate that DOM fallback.

A DOM ViewTransition can animate the Stage container. A ViewTransition inside Stage with Konva nodes or a ref throws a clear error. Fragment children remain supported, but Fragment refs stay null and provide no DOM methods.

The React compatibility matrix lists the supported hooks, features, fallbacks, and remaining limits. Native input synchronization and the fallback for older Konva versions continue from 19.2.7.

Validation

CI passes with Chromium, Firefox, and WebKit in development and production. The minimum React and React DOM 19.3.0 job also passes. The suite covers 196 correctness tests per build and 38 performance checks. Package checks cover both module formats, server rendering, package exports, consumer types, and the DevTools protocol.

Changelog

Sourced from react-konva's changelog.

19.3.0: React 19.3 support

Upgrade requirements

Upgrade React and React DOM to matching 19.3 versions before you install this release. The minimum React and React DOM version is now 19.3.0.

npm install react@19.3.0 react-dom@19.3.0 react-konva@19.3.0

For React 19.2 projects, pin react-konva to ~19.2.7. The range ^19.2.7 also allows 19.3.0, which requires the React upgrade. For React 18 projects, use the React Konva 18 release line.

Fixes and improvements

• Fixes the useActionState crash inside Stage with React 19.3. This resolves #859 through #860.
• Updates the bundled react-reconciler to 0.34.0 and scheduler to 0.28.0 for React 19.3.
• Canvas roots inherit React StrictMode checks from the DOM tree.
• Activity and Suspense preserve canvas state and node identity through hiding and reveal. Effects and refs disconnect and reconnect as each boundary requires.
• Stage removal discards pending child updates and runs effect cleanup, including for hidden Stages.
• Canvas components read the surrounding DOM form status through useFormStatus, including the submitted data and action.
• useId values remain stable on updates and distinct across DOM and Stage roots.
• Both package formats register with React DevTools. Development builds support hook state changes.

Renderer boundaries

Error boundaries inside Stage handle canvas errors and display Konva fallbacks. DOM error boundaries around Stage do not catch errors from canvas children. Uncaught canvas errors appear in the console with the original error and component stack, including errors during cleanup.

Canvas Suspense boundaries display Konva fallbacks. Canvas suspension does not activate a surrounding DOM Suspense boundary. A promise read before Stage renders can activate that DOM fallback.

A DOM ViewTransition can animate the Stage container. A ViewTransition inside Stage with Konva nodes or a ref throws a clear error. Fragment children remain supported, but Fragment refs stay null and provide no DOM methods.

The React compatibility matrix lists the supported hooks, features, fallbacks, and remaining limits. Native input synchronization and the fallback for older Konva versions continue from 19.2.7.

Validation

CI passes with Chromium, Firefox, and WebKit in development and production. The minimum React and React DOM 19.3.0 job also passes. The suite covers 196 correctness tests per build and 38 performance checks. Package checks cover both module formats, server rendering, package exports, consumer types, and the DevTools protocol.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions