Skip to content

Bump the frontend-security-and-maintenance group across 1 directory with 19 updates - #30

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-6c45613334
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-6c45613334

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026 •

Copy link
Copy Markdown

Bumps the frontend-security-and-maintenance group with 18 updates in the /web directory:

Package From To
@ruby/3.3-wasm-wasi 2.9.3-2.9.4 2.10.1
lucide-react 1.26.0 1.43.0
monaco-editor 0.55.1 0.56.0
pyodide 314.0.3 314.0.6
typescript 6.0.3 7.0.2
@testing-library/react 16.3.2 16.3.3
@testing-library/user-event 14.6.1 14.6.7
@types/node 24.13.3 26.5.0
@types/react 19.2.17 19.2.18
@types/react-dom 19.2.3 19.2.7
@vitejs/plugin-react 6.0.4 6.1.1
eslint 10.8.0 10.10.0
eslint-plugin-react-refresh 0.5.3 0.5.6
globals 17.7.0 17.12.0
jsdom 26.1.0 30.0.1
typescript-eslint 8.65.0 8.70.0
vite 8.0.16 8.2.2
vitest 4.1.10 5.0.0

Updates @ruby/3.3-wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @​ruby/3.3-wasm-wasi's releases.

2.10.1

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c
Commits

Updates @ruby/wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @​ruby/wasm-wasi's releases.

2.10.1

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c
Commits

Updates lucide-react from 1.26.0 to 1.43.0

Release notes

Sourced from lucide-react's releases.

Version 1.43.0

What's Changed

Full Changelog: lucide-icons/lucide@1.42.0...1.43.0

Version 1.42.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.41.0...1.42.0

Version 1.41.0

What's Changed

... (truncated)

Commits
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.
Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Updates pyodide from 314.0.3 to 314.0.6

Release notes

Sourced from pyodide's releases.

314.0.6

See changes at https://pyodide.org/en/stable/project/changelog.html#version-314-0-6

314.0.5

Changelog: https://pyodide.org/en/stable/project/changelog.html#version-314-0-5

314.0.4

No release notes provided.

Commits
  • 8cec1b9 314.0.6
  • a05d150 314.0.6
  • 5ef9c01 changelog for 314.0.6 release (#6439)
  • 6973c0d Rework the union in JsProxy to fix violation of strict aliasing rule (#6438)
  • 28c30bf Fix stack switching + tracing/profiling and event loop handling (#6437)
  • ef1be45 Fix signal handling regression when stack switching (#6435)
  • 9bdc573 Raise a clear error when loadPackage is given a requirement specifier (#6432)
  • b790df3 Update cross-build metadata files for version 314.0.5 (#6429)
  • c63e2a8 Add codeplug.org to related projects list (#6417)
  • 7da2331 Link to changelog inside github release (#6431)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

  • Avoid act() re-entrant when dispatching events (#1468) (20ce75f)
Commits

Updates @testing-library/user-event from 14.6.1 to 14.6.7

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

  • normalize DataTransfer format aliases (#1326) (1e0020b)
  • feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

  • default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

  • tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

v14.6.2

14.6.2 (2026-08-03)

Commits
  • 1e0020b fix: normalize DataTransfer format aliases (#1326)
  • d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
  • 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
  • 43efda7 fix: tab retargeting if focus moved during keydown (#1296)
  • d7e80e3 fix: keyboard event repeat property (#1312)
  • 43d8e6c ci: remove broken npm backfill step (#1322)
  • 1d18b1f fix(release): manually release a patch version (#1321)
  • 232f3e6 docs: add migration note and clean up README badges (#1320)
  • 83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
  • e8da819 ci: publish to npm via OIDC trusted publishing (#1317)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/user-event since your current version.


Updates @types/node from 24.13.3 to 26.5.0

Commits

Updates @types/react from 19.2.17 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.7

Commits

Updates @vitejs/plugin-react from 6.0.4 to 6.1.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Commits
  • 04cac50 release: plugin-react@6.1.1 (#1440)
  • 82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
  • 397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
  • 61006e6 fix(deps): update all non-major dependencies (#1433)
  • e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
  • fb2d6f3 fix(deps): update all non-major dependencies (#1427)
  • 39b3173 release: plugin-react@6.1.0 (#1428)
  • f1340b0 feat(react): add native React Compiler support (#1419)
  • 9ab698e fix(deps): update all non-major dependencies (#1375)
  • 68c0cb8 release: plugin-react@6.0.5 (#1362)
  • Additional commits viewable in compare view

Updates eslint from 10.8.0 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
  • 3c753f1 chore: update eslint (#21289) (renovate[bot])
  • 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
  • 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
  • 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
  • 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
  • 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

... (truncated)

Commits

Updates eslint-plugin-react-refresh from 0.5.3 to 0.5.6

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.6

  • Support re-exporting namespace components (fixes #116)

v0.5.5

  • Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly treated as React component #114 (fixes #113)
  • Add contentType and size to allowExportNames in Next config #115

v0.5.4

  • Add instant to allowExportNames in Next config #112
Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.6

  • Support re-exporting namespace components (fixes #116)

0.5.5

  • Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly treated as React component #114 (fixes #113)
  • Add contentType and size to allowExportNames in Next config #115

0.5.4

  • Add instant to allowExportNames in Next config #112
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@netlify

netlify Bot commented Sep 4, 2026 •

Copy link
Copy Markdown

❌ Deploy Preview for hafa-code failed.

Name Link
🔨 Latest commit 8c25149
🔍 Latest deploy log https://app.netlify.com/projects/hafa-code/deploys/6aa5631151a94e0008452d44

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-6c45613334 branch 5 times, most recently from a1b0a0b to 4db4574 Compare September 6, 2026 09:46
…ith 19 updates

Bumps the frontend-security-and-maintenance group with 18 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@ruby/3.3-wasm-wasi](https://github.com/ruby/ruby.wasm) | `2.9.3-2.9.4` | `2.10.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.26.0` | `1.43.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` |
| [pyodide](https://github.com/pyodide/pyodide) | `314.0.3` | `314.0.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.5.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.7` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.1.1` |
| [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.10.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.6` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.12.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.0.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.70.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.0` |



Updates `@ruby/3.3-wasm-wasi` from 2.9.3-2.9.4 to 2.10.1
- [Release notes](https://github.com/ruby/ruby.wasm/releases)
- [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1)

Updates `@ruby/wasm-wasi` from 2.9.3-2.9.4 to 2.10.1
- [Release notes](https://github.com/ruby/ruby.wasm/releases)
- [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1)

Updates `lucide-react` from 1.26.0 to 1.43.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.43.0/packages/lucide-react)

Updates `monaco-editor` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0)

Updates `pyodide` from 314.0.3 to 314.0.6
- [Release notes](https://github.com/pyodide/pyodide/releases)
- [Commits](pyodide/pyodide@314.0.3...314.0.6)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.7)

Updates `@types/node` from 24.13.3 to 26.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.4 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `eslint` from 10.8.0 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.10.0)

Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.6)

Updates `globals` from 17.7.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.12.0)

Updates `jsdom` from 26.1.0 to 30.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v30.0.1)

Updates `typescript-eslint` from 8.65.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

Updates `vite` from 8.0.16 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 4.1.10 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@ruby/3.3-wasm-wasi"
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@ruby/wasm-wasi"
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: lucide-react
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: monaco-editor
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: pyodide
  dependency-version: 314.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: typescript-eslint
  dependency-version: 8.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-6c45613334 branch from 4db4574 to 8c25149 Compare September 12, 2026 14:34
@coderabbitai

coderabbitai Bot commented Sep 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: cfb534b4-fd50-4605-9350-126fd79cc478

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-6c45613334 branch September 19, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants