fix(deps): update dependencies (minor/patch)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
open	dependencies	patch	5.4.3 → 5.4.4
react (source)	dependencies	minor	^19.2.8 → ^19.3.0
react (source)	dependencies	minor	19.2.8 → 19.3.0
react-dom (source)	dependencies	minor	^19.2.8 → ^19.3.0
react-dom (source)	dependencies	minor	19.2.8 → 19.3.0

---

Release Notes

Byron/open-rs (open)

v5.4.4

Compare Source

Bug Fixes

• open Windows paths without wildcard expansion

  Opening a child of a bracket-named directory fails because Start-Process
  resolves parent directories as PowerShell wildcard patterns. The isolated
  Windows regression test reproduced WildcardPatternException for a copied
  executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

  Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining
  Start-Process for URLs and application names. These cmdlets also work under
  PowerShell Constrained Language Mode. Share the embedded script between
  Windows and WSL, keep targets in environment data, and stop on launch errors
  to report a nonzero exit status. Preserve the security boundary established
  in fd29861: cmd /c start remains opt-in through the insecure feature. No
  previously removed launcher options are restored.

  The integration test launches only a copy of its own test binary, which
  records its executable path and exits. It checks absolute and relative paths
  with invalid and valid bracket patterns, Unicode, backticks, quotes, shell
  metacharacters, and leading dashes in normal and constrained PowerShell
  sessions, plus failure for a missing executable. It requires neither Explorer
  nor registered document or URL handlers. Adjust the existing fallback
  assertion to also allow the opt-in cmd launcher after Explorer with all
  features enabled.

  Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1:
  cargo test and cargo test --all-features each passed all 19 tests, including
  the behavioral regression. git diff --check passed, and cargo
  package --list includes the embedded script. Test-Path returned false without
  errors for representative https, mailto, and file URLs. Actual GUI folder,
  document, URL handling and WSL interop were not exercised locally.

Commit Statistics

• 2 commits contributed to the release.
• 8 days passed between releases.
• 1 commit was understood as conventional.
• 1 unique issue was worked on: #​132

Commit Details

view details

• #​132
  • Open Windows paths without wildcard expansion (ad95c40)
• Uncategorized
  • Merge pull request #​133 from Byron/fix-open-on-windows (45317f8)

react/react (react)

v19.3.0

Compare Source

react/react (react-dom)

v19.3.0

Compare Source

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
galopen-lp	Ready	Preview	Sep 13, 2026 6:25am UTC