chore(deps): bump the root-minor-patch group across 1 directory with 18 updates by dependabot[bot] · Pull Request #86 · nemtus/hackathon

dependabot · 2026-07-13T19:38:29Z

Bumps the root-minor-patch group with 17 updates in the / directory:

Package	From	To
@fortawesome/fontawesome-svg-core	`7.2.0`	`7.3.0`
@fortawesome/free-brands-svg-icons	`7.2.0`	`7.3.0`
@fortawesome/free-regular-svg-icons	`7.2.0`	`7.3.0`
@fortawesome/free-solid-svg-icons	`7.2.0`	`7.3.0`
@fortawesome/react-fontawesome	`3.3.1`	`3.4.0`
firebase	`12.14.0`	`12.16.0`
react-hook-form	`7.78.0`	`7.81.0`
react-icons	`5.6.0`	`5.7.0`
react-router-dom	`7.17.0`	`7.18.1`
@types/node	`22.19.20`	`22.20.1`
@typescript-eslint/eslint-plugin	`8.61.0`	`8.64.0`
@vitejs/plugin-react	`6.0.2`	`6.0.3`
autoprefixer	`10.5.0`	`10.5.2`
firebase-tools	`15.19.1`	`15.23.0`
postcss	`8.5.15`	`8.5.19`
prettier	`3.8.3`	`3.9.5`
vite	`8.0.16`	`8.1.4`

Updates @fortawesome/fontawesome-svg-core from 7.2.0 to 7.3.0

Release notes

Sourced from @fortawesome/fontawesome-svg-core's releases.

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Updates @fortawesome/free-brands-svg-icons from 7.2.0 to 7.3.0

Release notes

Sourced from @fortawesome/free-brands-svg-icons's releases.

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Updates @fortawesome/free-regular-svg-icons from 7.2.0 to 7.3.0

Release notes

Sourced from @fortawesome/free-regular-svg-icons's releases.

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Updates @fortawesome/free-solid-svg-icons from 7.2.0 to 7.3.0

Release notes

Sourced from @fortawesome/free-solid-svg-icons's releases.

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Updates @fortawesome/react-fontawesome from 3.3.1 to 3.4.0

Release notes

Sourced from @fortawesome/react-fontawesome's releases.

v3.4.0

3.4.0 (2026-07-08)

Features

Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

deps: bump fast-uri from 3.1.0 to 3.1.2 (FortAwesome/react-fontawesome@a193c11)

deps-dev: bump dev dependencies to use FA 7.3.0 (FortAwesome/react-fontawesome@cc540d8)

Full Changelog: FortAwesome/react-fontawesome@v3.3.1...v3.4.0

Changelog

Sourced from @fortawesome/react-fontawesome's changelog.

3.4.0 (2026-07-08)

Features

Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

deps: bump fast-uri from 3.1.0 to 3.1.2 (a193c11)

deps-dev: bump dev dependencies to use FA 7.3.0 (cc540d8)

Commits

814990b chore(release): 3.4.0 [skip ci]
cc540d8 chore(deps): bump dev to FA 7.3.0
949c7a1 Merge pull request #651 from FortAwesome/new-7-3-animations
3dfea93 fix: more accurate links to animations
4415c9e feat: new animations to support 7.3.0
03d8e13 Merge pull request #644 from FortAwesome/dependabot/npm_and_yarn/fast-uri-3.1.2
a193c11 chore(deps): bump fast-uri from 3.1.0 to 3.1.2
See full diff in compare view

Updates firebase from 12.14.0 to 12.16.0

Release notes

Sourced from firebase's releases.

firebase@12.15.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@firebase/app@0.15.0

Minor Changes

420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

@firebase/app-check@0.12.0

Minor Changes

420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

Patch Changes

e389f70 #9991 (fixes #9405) - Fix error causing Auth and AppCheck conflict when both are using ReCAPTCHA Enterprise.

firebase@12.15.0

Minor Changes

043c0ab #9929 - Merge offline pipeline implementation with one minor API change

420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

Patch Changes

Updated dependencies [043c0ab, e389f70, 420156e, 9bef5ab, 33521f2, 6a9d3d1, 712091c]:

@firebase/firestore@4.16.0

@firebase/app-check@0.12.0

@firebase/auth@1.13.3

@firebase/app@0.15.0

@firebase/ai@2.13.1

@firebase/remote-config@0.8.5

@firebase/auth-compat@0.6.8

@firebase/firestore-compat@0.4.11

@firebase/app-check-compat@0.4.5

@firebase/app-compat@0.5.14

@firebase/remote-config-compat@0.2.26

@firebase/firestore@4.16.0

Minor Changes

043c0ab #9929 - Merge offline pipeline implementation with one minor API change

@firebase/ai@2.13.1

Patch Changes

... (truncated)

Commits

f0c9435 Merge release into main
fe04cec build: put include-dependencies flag back (#10137)
2894e91 Update re2js version (#10104)
df21ad3 fix: Resolve duplicate assertion ID and add check to Firestore CI (#10138)
1d24e5f chore(data-connect): refactor streaming tests and change idle timeout back to...
65baa7b fix(ai): update deprecated gemini models strings" (#10043)
6c710ba build(deps): update deps with security issues (pass 1) (#10119)
573fd16 build(deps): Upgrade Lerna to 9.0.6 (#10032)
6d874fc fix zizmor findings (#10044)
7ca70ab Security Audit & Remediation: repo-scripts/api-documenter (#10112)
Additional commits viewable in compare view

Updates react-hook-form from 7.78.0 to 7.81.0

Release notes

Sourced from react-hook-form's releases.

Version 7.81.0

⚜️ feat: FieldArray component (#13394)
<FieldArray
  control={control}
  name="test"
  render={({ fields }) => null}
/>
🐞 fix #13538 useFieldArray min 1 item validation error changes its location in the errors object (#13539) 🐞 fix #13569 calling reset triggers subscribe with latest name instead of undefined (#13574) 🐞 fix(useController): reflect cleared parent object in controlled fields (#13550) (#13553) 🐞 fix(flatten): preserve Date values as leaf nodes (#13566) 🐛 fix(unset): guard against prototype keyword path traversal (#13559) (#13560) 🏸 improve setValue api with shrink value (#13576) 👝 close #13577 improve re-render with useFieldArray reset (#13578) 🐞 fix #13575 issue: clearErrors changes the name value from form.subscribe (#13579)

thanks to @DakshSinghDhami, @JSap0914, @tran-simon & @EduardF1

Version 7.80.0

🧄 feat: disable useFieldArray fields (#13535)
const { fields } = useFieldArray({ disabled: true });
fields[0].disabled; // contains disabled props
🛺 perf: make rhf more performant (#13524) 🐞 fix(deepEqual): empty array and empty plain object should not be equal (#13533)

thanks to @JSap0914

Version 7.79.0

🚷 feat: use field array disabled (#13520)
useFieldArray({ disabled, name: 'test' })
🐞 fix controller onChange promise (#13518) 🐞 fix: track visited pairs in deepEqual to avoid false positives with shared object references (#13515) 🐞 fix #12651 issue: field validation with shouldUseNativeValidation does not behave native like for radio groups (#13512) 🐞 fix #12754 createFormControl breaks with fast refresh in dev mode (#13511) 🐞 close #12709 #12750 StrictMode would remove field value & get mounted again (#13508) 🐞 fix #13505 issue: In v8 with React compiler, a change in formState errors does not cause child components to re-render (#13510)

thanks to @DucMinhNe & @louzhedong

Changelog

Sourced from react-hook-form's changelog.

[7.81.0] - 2026-07-05

Added

FieldArray component built on useFieldArray for controlled field-array rendering

Fixed

clearErrors changing the name value from form.subscribe

reset triggering subscribe with the latest name instead of undefined

setValues leaving stale elements behind when shrinking a field array

flatten preserving Date values as leaf nodes

useFieldArray min length validation error changing location in the errors object

useController not reflecting a cleared parent object in controlled fields

Security

Harden unset() against prototype-path traversal (__proto__ / constructor / prototype), matching the existing set() guard

Performance

Improve re-render with useFieldArray reset

[7.80.0] - 2026-06-20

Added

disabled prop support for individual fields within useFieldArray

Fixed

deepEqual incorrectly treating empty array [] and empty plain object {} as equal

Performance

Improve onChange, setValid, dirty checking, setValue, and setValues performance

[7.79.0] - 2026-06-13

Added

disabled option to useFieldArray

Fixed

Controller onChange promise return type

deepEqual false positives with shared object references

shouldUseNativeValidation behavior for radio groups

createFormControl stability with fast refresh in dev mode

StrictMode value preservation during remount

... (truncated)

Commits

46b217e 7.81.0
6595a91 🐞 fix #13575 issue: clearErrors changes the name value from form.subscribe (#...
cae5dfe 👝 close #13577 improve re-render with useFieldArray reset (#13578)
5b2b743 🏸 improve setValue api with shrink value (#13576)
6112441 🐞 fix #13569 calling reset triggers subscribe with latest name instead of und...
f89388f 🐞 fix(flatten): preserve Date values as leaf nodes (#13566)
46381fa Revert "docs: fix grammar in demo descriptions (#13565)" (#13568)
d4c804a Revert "test: remove duplicate UseFieldArray slug (#13564)" (#13567)
63ec54f test: remove duplicate UseFieldArray slug (#13564)
08792ad docs: fix grammar in demo descriptions (#13565)
Additional commits viewable in compare view

Updates react-icons from 5.6.0 to 5.7.0

Release notes

Sourced from react-icons's releases.

v5.7.0

What's Changed

update packages by @kamijin-fanta in react-icons/react-icons#1153

Full Changelog: react-icons/react-icons@v5.6.0...v5.7.0

Icon Library License Version Count

Circum Icons MPL-2.0 license 1.0.0 288

Font Awesome 5 CC BY 4.0 License 5.15.4-3-gafecf2a 1612

Font Awesome 6 CC BY 4.0 License 6.7.2-1-g840c215 2060

Ionicons 4 MIT 4.6.3 696

Ionicons 5 MIT 5.5.4 1332

Material Design icons Apache License Version 2.0 4.0.0-161-gf3fb4442b2 4341

Typicons CC BY-SA 3.0 2.1.2 336

Github Octicons icons MIT 18.3.0 264

Feather MIT 4.29.2 287

Lucide ISC 0.462.0 1541

Game Icons CC BY 3.0 12920d6565588f0512542a3cb0cdfd36a497f910 4040

Weather Icons SIL OFL 1.1 2.0.12 219

Devicons MIT 1.8.0 192

Ant Design Icons MIT 4.4.2 831

Bootstrap Icons MIT 1.13.1 2754

Remix Icon Apache License Version 2.0 4.9.1 3229

Flat Color Icons MIT 1.0.2 329

Grommet-Icons Apache License Version 2.0 4.14.0 637

Heroicons MIT 1.0.6 460

Heroicons 2 MIT 2.2.0 972

Simple Icons CC0 1.0 Universal 16.24.0 3446

Simple Line Icons MIT 2.5.5 189

IcoMoon Free CC BY 4.0 License d006795ede82361e1bac1ee76f215cf1dc51e4ca 491

BoxIcons MIT 2.1.4 1634

css.gg MIT 2.1.4 704

VS Code Icons CC BY 4.0 0.0.0 612

Tabler Icons MIT 3.44.0 6146

Themify Icons MIT v0.1.2-2-g9600186 352

Radix Icons MIT @radix-ui/react-icons@1.3.2-35-g112af91 332

Phosphor Icons MIT 2.1.1 9072

Icons8 Line Awesome MIT 1.3.1 1544

Commits

87470d5 v5.7.0
e1cb061 fix ci publish
bffaab7 Revert "v5.7.0"
2cde989 v5.7.0
dac95cc update npm in ci workflow
21fcd04 Revert "v5.7.0"
3a05518 v5.7.0
c8b5050 fix github pages deploy
2f78ae4 Update CI actions, Pages deploy, and staged npm publishing
11f5a06 update packages (#1153)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-icons since your current version.

Updates react-router-dom from 7.17.0 to 7.18.1

Changelog

Sourced from react-router-dom's changelog.

v7.18.1

Patch Changes

Fix incorrect package.json main field for CommonJS builds (#15238)

Updated dependencies:

react-router@7.18.1

v7.18.0

Patch Changes

Updated dependencies:

react-router@7.18.0

Commits

afdf85d Release v7.18.1 (#15253)
2ecaa1d Fix react-router-dom main entry metadata (#15238)
6fb1e79 Release v7.18.0 (#15187)
See full diff in compare view

Updates @types/node from 22.19.20 to 22.20.1

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.61.0 to 8.64.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.64.0 (2026-07-13)

🚀 Features

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

... (truncated)

Commits

414d9ab chore(release): publish 8.64.0
bcfe16f feat(eslint-plugin): [no-loop-func] support using / await using declarati...
5b5bfde fix(eslint-plugin): [require-array-sort-compare] handle constrained arrays (#...
321856c chore: cleanup cspell config (#12526)
b418cf5 feat(typescript-estree): throw for invalid definite assignment in class prope...
737de2b docs: align unified-signatures correct example parameter (#12506)
a63c17a docs: fix shadowed parameter name in unified-signatures example (#12502)
290cf6c chore(release): publish 8.63.0
8d8fda6 feat(eslint-plugin): [no-misused-promises] detect async usage of a sync dispo...
fec4f4f fix(eslint-plugin): [no-base-to-string] don't flag a shadowed String() call (...
Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.61.0 to 8.64.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
3ea32f4 chore(release): publish 8.62.1
54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
aaad718 chore(release): publish 8.61.1
See full diff in compare view

Updates @vitejs/plugin-react from 6.0.2 to 6.0.3

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.0.3 (2026-06-23)

Commits

640fd35 release: plugin-react@6.0.3
889efb0 fix(deps): update all non-major dependencies (#1249)
6c57dd4 fix(plugin-react): use '/' base in bundledDev preamble to fix non-root base p...
3cc33a7 fix(deps): update react-related dependencies (#1245)
c0f7c7f docs: mention the Biome rule in the "Consistent components exports" section (...
cd80f0f fix(deps): update all non-major dependencies (#1241)
e38acca fix(deps): update all non-major dependencies (#1227)
9a9bb26 perf(react): improve react compiler preset so that slightly more modules are ...
See full diff in compare view

Updates autoprefixer from 10.5.0 to 10.5.2

Release notes

Sourced from autoprefixer's releases.

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

Changelog

Sourced from autoprefixer's changelog.

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

Commits

e99e381 Release 10.5.2 version
98de3f5 Move -webkit-fill-available before -moz-available to get a closer to spec res...
8fe2513 Release 10.5.1 version
60ea651 Update release process
cbd4a70 Update dependencies
ffae49f fix: reset grid area spans when overriding areas (#1549)
d90ad86 Fix CI
a0f701b Update dependencies
bb935eb Fix CI
e63efe4 Move to pnpm 11
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.

Updates firebase-tools from 15.19.1 to 15.23.0

Release notes

Sourced from firebase-tools's releases.

Description has been truncated

…18 updates Bumps the root-minor-patch group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fortawesome/fontawesome-svg-core](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.0` | | [@fortawesome/free-brands-svg-icons](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.0` | | [@fortawesome/free-regular-svg-icons](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.0` | | [@fortawesome/free-solid-svg-icons](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.0` | | [@fortawesome/react-fontawesome](https://github.com/FortAwesome/react-fontawesome) | `3.3.1` | `3.4.0` | | [firebase](https://github.com/firebase/firebase-js-sdk) | `12.14.0` | `12.16.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.78.0` | `7.81.0` | | [react-icons](https://github.com/react-icons/react-icons) | `5.6.0` | `5.7.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.17.0` | `7.18.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.20` | `22.20.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.61.0` | `8.64.0` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.0` | `10.5.2` | | [firebase-tools](https://github.com/firebase/firebase-tools) | `15.19.1` | `15.23.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.19` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.5` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.4` | Updates `@fortawesome/fontawesome-svg-core` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.0) Updates `@fortawesome/free-brands-svg-icons` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.0) Updates `@fortawesome/free-regular-svg-icons` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.0) Updates `@fortawesome/free-solid-svg-icons` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.0) Updates `@fortawesome/react-fontawesome` from 3.3.1 to 3.4.0 - [Release notes](https://github.com/FortAwesome/react-fontawesome/releases) - [Changelog](https://github.com/FortAwesome/react-fontawesome/blob/main/CHANGELOG.md) - [Commits](FortAwesome/react-fontawesome@v3.3.1...v3.4.0) Updates `firebase` from 12.14.0 to 12.16.0 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.14.0...firebase@12.16.0) Updates `react-hook-form` from 7.78.0 to 7.81.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.78.0...v7.81.0) Updates `react-icons` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/react-icons/react-icons/releases) - [Commits](react-icons/react-icons@v5.6.0...v5.7.0) Updates `react-router-dom` from 7.17.0 to 7.18.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom) Updates `@types/node` from 22.19.20 to 22.20.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.61.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.61.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser) Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `autoprefixer` from 10.5.0 to 10.5.2 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.0...10.5.2) Updates `firebase-tools` from 15.19.1 to 15.23.0 - [Release notes](https://github.com/firebase/firebase-tools/releases) - [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-tools@v15.19.1...v15.23.0) Updates `postcss` from 8.5.15 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.19) Updates `prettier` from 3.8.3 to 3.9.5 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.3...3.9.5) Updates `vite` from 8.0.16 to 8.1.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.4/packages/vite) --- updated-dependencies: - dependency-name: "@fortawesome/fontawesome-svg-core" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@fortawesome/free-brands-svg-icons" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@fortawesome/free-regular-svg-icons" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@fortawesome/free-solid-svg-icons" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@fortawesome/react-fontawesome" dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: firebase dependency-version: 12.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: react-hook-form dependency-version: 7.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: react-icons dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: react-router-dom dependency-version: 7.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@types/node" dependency-version: 22.20.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: autoprefixer dependency-version: 10.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: firebase-tools dependency-version: 15.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: postcss dependency-version: 8.5.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: prettier dependency-version: 3.9.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: vite dependency-version: 8.1.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-13T19:39:50Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
react-router-dom@7.17.0 ⏵ 7.18.1			^-1
@typescript-eslint/parser@8.64.0
firebase-tools@15.19.1 ⏵ 15.23.0	^-3
firebase@12.14.0 ⏵ 12.16.0		⁺¹	⁺²
@typescript-eslint/eslint-plugin@8.64.0
react-icons@5.6.0 ⏵ 5.7.0	⁺¹²		⁺⁵
@types/node@22.20.1
postcss@8.5.15 ⏵ 8.5.19
vite@8.0.16 ⏵ 8.1.4		⁺¹
@fortawesome/fontawesome-svg-core@7.2.0 ⏵ 7.3.0	⁺¹	⁺¹	⁺⁶
@fortawesome/free-regular-svg-icons@7.2.0 ⏵ 7.3.0
@fortawesome/free-brands-svg-icons@7.2.0 ⏵ 7.3.0		⁺¹	⁺⁶
@fortawesome/free-solid-svg-icons@7.2.0 ⏵ 7.3.0	^-2	⁺¹
autoprefixer@10.5.0 ⏵ 10.5.2	⁺¹
@vitejs/plugin-react@6.0.2 ⏵ 6.0.3	⁺¹
prettier@3.9.5
@fortawesome/react-fontawesome@3.3.1 ⏵ 3.4.0	⁺¹	⁺¹	⁺⁵
react-hook-form@7.78.0 ⏵ 7.81.0		⁺¹

View full report

socket-security · 2026-07-13T19:39:51Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/vite@8.1.4` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `firebase-tools` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/firebase-tools@15.23.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/firebase-tools@15.23.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-07-27T19:36:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026

dependabot Bot closed this Jul 27, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/root-minor-patch-fecacd86c6 branch July 27, 2026 19:36

Navigation Menu

Uh oh!

Uh oh!

chore(deps): bump the root-minor-patch group across 1 directory with 18 updates - #86

chore(deps): bump the root-minor-patch group across 1 directory with 18 updates#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-fecacd86c6

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 13, 2026

Uh oh!

socket-security Bot commented Jul 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Icon Library	License	Version	Count
Circum Icons	MPL-2.0 license	1.0.0	288
Font Awesome 5	CC BY 4.0 License	5.15.4-3-gafecf2a	1612
Font Awesome 6	CC BY 4.0 License	6.7.2-1-g840c215	2060
Ionicons 4	MIT	4.6.3	696
Ionicons 5	MIT	5.5.4	1332
Material Design icons	Apache License Version 2.0	4.0.0-161-gf3fb4442b2	4341
Typicons	CC BY-SA 3.0	2.1.2	336
Github Octicons icons	MIT	18.3.0	264
Feather	MIT	4.29.2	287
Lucide	ISC	0.462.0	1541
Game Icons	CC BY 3.0	12920d6565588f0512542a3cb0cdfd36a497f910	4040
Weather Icons	SIL OFL 1.1	2.0.12	219
Devicons	MIT	1.8.0	192
Ant Design Icons	MIT	4.4.2	831
Bootstrap Icons	MIT	1.13.1	2754
Remix Icon	Apache License Version 2.0	4.9.1	3229
Flat Color Icons	MIT	1.0.2	329
Grommet-Icons	Apache License Version 2.0	4.14.0	637
Heroicons	MIT	1.0.6	460
Heroicons 2	MIT	2.2.0	972
Simple Icons	CC0 1.0 Universal	16.24.0	3446
Simple Line Icons	MIT	2.5.5	189
IcoMoon Free	CC BY 4.0 License	d006795ede82361e1bac1ee76f215cf1dc51e4ca	491
BoxIcons	MIT	2.1.4	1634
css.gg	MIT	2.1.4	704
VS Code Icons	CC BY 4.0	0.0.0	612
Tabler Icons	MIT	3.44.0	6146
Themify Icons	MIT	v0.1.2-2-g9600186	352
Radix Icons	MIT	`@radix-ui/react-icons@1`.3.2-35-g112af91	332
Phosphor Icons	MIT	2.1.1	9072
Icons8 Line Awesome	MIT	1.3.1	1544

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 7.3.0

Release 7.3.0

Release 7.3.0

Release 7.3.0

v3.4.0

3.4.0 (2026-07-08)

Features

Chores

3.4.0 (2026-07-08)

Features

Chores

firebase@12.15.0

What's Changed

@​firebase/app@​0.15.0

Minor Changes

@​firebase/app-check@​0.12.0

Minor Changes

Patch Changes

firebase@12.15.0

Minor Changes

Patch Changes

@​firebase/firestore@​4.16.0

Minor Changes

@​firebase/ai@​2.13.1

Patch Changes

Version 7.81.0

Version 7.80.0

Version 7.79.0

[7.81.0] - 2026-07-05

Added

Fixed

Security

Performance

[7.80.0] - 2026-06-20

Added

Fixed

Performance

[7.79.0] - 2026-06-13

Added

Fixed

v5.7.0

What's Changed

v7.18.1

Patch Changes

v7.18.0

Patch Changes

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.62.1

8.62.1 (2026-06-29)

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

8.62.1 (2026-06-29)

🩹 Fixes

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.63.0

8.63.0 (2026-07-06)

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

`@firebase/app@0`.15.0

`@firebase/app-check@0`.12.0

`@firebase/firestore@4`.16.0

`@firebase/ai@2`.13.1