Bump the core-ui-package-updates group across 1 directory with 16 updates

[dependabot]

Bumps the core-ui-package-updates group with 16 updates in the /airflow-core/src/airflow/ui directory:

Package	From	To
@tanstack/react-query	5.102.8	5.103.1
@tanstack/react-virtual	3.14.10	3.14.13
i18next	26.4.1	26.4.2
katex	0.18.5	0.18.7
react-hook-form	7.87.0	7.88.0
react-i18next	17.0.13	17.0.14
react-resizable-panels	4.12.3	4.12.4
react-router-dom	7.18.3	7.18.4
yaml	2.9.0	2.9.1
@playwright/test	1.62.1	1.63.0
@rolldown/plugin-babel	0.2.3	0.2.4
@tanstack/eslint-plugin-query	5.102.8	5.103.1
@types/node	26.4.1	26.6.1
happy-dom	20.13.2	20.14.5
prettier	3.9.6	3.9.7
vite	8.2.2	8.3.0

Updates @tanstack/react-query from 5.102.8 to 5.103.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.1
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.103.1
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query@​5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

• #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

  Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

• Updated dependencies [9567367]:

  • @​tanstack/query-devtools@​5.103.0
  • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

• Updated dependencies [4c7cdbb]:
  • @​tanstack/query-persist-client-core@​5.103.0
  • @​tanstack/react-query@​5.103.0

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• d63afc7 Simplifed query methods/internal tests new lint (#11347)
• 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
• 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
• 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
• a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
• 1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
• Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.10 to 3.14.13

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.13

Patch Changes

• #1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

• Updated dependencies [06d1b6b, 2c0a0ea]:

  • @​tanstack/virtual-core@​3.17.11

@​tanstack/react-virtual@​3.14.12

Patch Changes

• Updated dependencies [ab3278c]:
  • @​tanstack/virtual-core@​3.17.10

@​tanstack/react-virtual@​3.14.11

Patch Changes

• Updated dependencies [4a0adf3]:
  • @​tanstack/virtual-core@​3.17.9

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.13

Patch Changes

• #1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

• Updated dependencies [06d1b6b, 2c0a0ea]:

  • @​tanstack/virtual-core@​3.17.11

3.14.12

Patch Changes

• Updated dependencies [ab3278c]:
  • @​tanstack/virtual-core@​3.17.10

3.14.11

Patch Changes

• Updated dependencies [4a0adf3]:
  • @​tanstack/virtual-core@​3.17.9

Commits

• 78371e8 ci: Version Packages (#1279)
• b48e3b0 fix(react-virtual): skip flushSync while measuring from the ref callback (#1282)
• 1a57cf7 test(react-virtual): wait for smooth scrolls to settle instead of a fixed 2s ...
• 2c0a0ea fix(virtual-core): keep a travelling smooth scroll alive through a prepend (#...
• df47889 ci: Version Packages (#1277)
• 171029d ci: Version Packages (#1269)
• 4a0adf3 fix(virtual-core): re-issue clamped end-anchor compensation once the sizer gr...
• See full diff in compare view

Updates i18next from 26.4.1 to 26.4.2

Release notes

Sourced from i18next's releases.

v26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

Changelog

Sourced from i18next's changelog.

26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

Commits

• 4dba50f 26.4.2
• e436b62 build
• d955fb0 fix: stringify formatter results in nested values, changelog v26.4.2
• dfafa3c fix: keep replacement patterns literal in nested values (#2447)
• 3c9981e chore: keep dev-only and local files out of the npm package
• See full diff in compare view

Updates katex from 0.18.5 to 0.18.7

Release notes

Sourced from katex's releases.

v0.18.7

0.18.7 (2026-09-06)

Features

• add \reflectbox and \mapsfrom support (#4262) (ab509fd)

v0.18.6

0.18.6 (2026-09-05)

Bug Fixes

• array: preserve tags on empty final rows (#4277) (02d552c)

Changelog

Sourced from katex's changelog.

0.18.7 (2026-09-06)

Features

• add \reflectbox and \mapsfrom support (#4262) (ab509fd)

0.18.6 (2026-09-05)

Bug Fixes

• array: preserve tags on empty final rows (#4277) (02d552c)

Commits

• cd5ec4f chore(release): 0.18.7 [ci skip]
• ab509fd feat: add \reflectbox and \mapsfrom support (#4262)
• 9eb45b7 chore(release): 0.18.6 [ci skip]
• 02d552c fix(array): preserve tags on empty final rows (#4277)
• 49904aa chore(deps): update dependency browserslist to v4.28.7 [security] (#4280)
• 2d2a177 chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 (#4275)
• See full diff in compare view

Updates react-hook-form from 7.87.0 to 7.88.0

Release notes

Sourced from react-hook-form's releases.

Version 7.88.0

✨ Features

• Add Error Message component (#13472)
• Add the Error Message component for displaying validation errors from React Hook Form.

🐞 Fixes

• Fix stale validating state after resetField() (#13735)
• Fix errors and touched state remaining for rows removed by replace() (#13734)
• Fix stale resolver results updating form state after reset() during handleSubmit() (#13733)
• Fix nested registered errors being removed when trigger() targets their parent (#13732)
• Fix resolver-reported root errors being dropped during handleSubmit() (#13731)
• Fix parent errors being incorrectly set when trigger() targets a field with only nested resolver errors (#13730)
• Fix useWatch compute cache not being initialized with the initial output (#13728)
• Fix FileList being lost during flatten/expand and omit undefined values in jsonToFormData (#13725)
• Fix schemaErrorLookup reporting nested containers as exact-name errors (#13727)
• Fix isValidating not being recomputed after unregister() clears validating fields (#13723)
• Fix stale resolver state updates after reset() (#13722)
• Fix iterateFieldsByAction only breaking out of one loop level (#13718)
• Fix stale validation types surviving setError() overwrites (#13716)
• Fix reset() not clearing validating fields (#13714)
• Fix remove() leaking deleted values onto surviving field-array items (#13713)
• Fix the React Server build being unpublished (#13709)
• Fix validateField calling setCustomValidity once per key in validate-object mode (#13707)
• Fix useFieldArray focus behavior for checkboxes and radio buttons in appended rows (#13705)
• Fix getFieldState reading isValidating from the supplied form state (#13704)
• Fix unregister() stripping kept values from the submit payload (#13703)
• Fix useFormState not re-subscribing when control changes (#13702)
• Fix reset() keeping dirtyFields out of sync with isDirty when keepValues is enabled (#13701)
• Fix useForm not reconciling correctly when an Activity subtree is initially hidden (#13698)
• Fix cleared errors returning after the delayError timer fires (#13697)
• Fix cloneObject throwing when checking Blob with instanceof (#13694)
• Fix useFieldArray retaining stale fields after an Activity subtree reconnects (#13688)

🧹 Refactors

• Extend _isTracked to the remaining multi-key proxy/subscribe form-state checks (#13699)
• Extract _isTracked helper for proxy/subscribe form-state checks (#13690)
• Remove the unused abortEarly parameter from iterateFieldsByAction (#13689)
• Remove redundant optional chaining from clearErrors (#13696)

📝 Documentation

• Fix useWatch compute example variable names in JSDoc (#13700)

📦 Dependencies

• Bump joi from 18.2.1 to 18.2.5 (#13719)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

Changelog

Commits

• 28334fa 7.88.0
• 8b7e0e4 🐞 fix(setValue): compare transformed value for dirty state with valueAs/setVa...
• b5c210b 🐞 fix: cancel nested delayError timers when a parent is cleared or unregister...
• 8918788 🐞 fix: refresh criteriaMode flag when form options are updated at runtime (#1...
• 39cfba0 🐞 fix(resetField): clear stale validating state for the field (#13735)
• a448816 🐞 fix: drop errors and touched state for rows removed by replace() (#13734)
• 3756191 🐞 fix(handleSubmit): ignore stale resolver result after reset (#13733)
• d2b757f 🐞 fix(trigger): keep registered nested errors when trigger targets their pare...
• f32faed 🐞 fix(handleSubmit): keep resolver-reported root errors on submit (#13731)
• cdcbfca 🐞 fix: don't set parent error when trigger target has only nested resolver er...
• Additional commits viewable in compare view

Updates react-i18next from 17.0.13 to 17.0.14

Changelog

Sourced from react-i18next's changelog.

17.0.14

• fix: the i18n object returned by useTranslation was only refreshed when i18n.language changed, so a resolvedLanguage (or languages) change of its own kept handing components the previous snapshot. That happens whenever the translations for the current language arrive after the switch — i18next resolves to the fallback until its store has them — and components reading i18n.resolvedLanguage (language switchers, for example) then stayed one switch behind. The cached wrapper is now keyed on all three language fields, which are exactly the ones the surrounding useMemo already depends on; wrapper identity still only changes when the language state does, so the caching from #1885 is unaffected. Reported via next-i18next#2348.

Commits

• 5f8c5f9 17.0.14
• 6def81a fix: refresh the returned i18n wrapper when resolvedLanguage changes
• f37ea87 docs: "For AI assistants" paragraph in the README
• e0592ba chore: keep dev-only and local files out of the npm package
• See full diff in compare view

Updates react-resizable-panels from 4.12.3 to 4.12.4

Release notes

Sourced from react-resizable-panels's releases.

4.12.4

• 743: Don't capture pointer for a detached Separator
• 741: Separator ARIA values use proper panel indices

Changelog

Sourced from react-resizable-panels's changelog.

4.12.4

• 743: Don't capture pointer for a detached Separator
• 741: Separator ARIA values use proper panel indices

Commits

• 152b1a8 4.12.3 -> 4.12.4
• f711534 fix: skip pointer capture for detached separators (#743)
• 2419acf fix: use group-relative panel index for Separator aria values (Fixes #740) (#...
• See full diff in compare view

Updates react-router-dom from 7.18.3 to 7.18.4

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

• Updated dependencies:
  • react-router@7.18.4

Commits

• 1b1e0b0 Release v7.18.4 (#15498)
• See full diff in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates @rolldown/plugin-babel from 0.2.3 to 0.2.4

Release notes

Sourced from @​rolldown/plugin-babel's releases.

plugin-babel@0.2.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​rolldown/plugin-babel's changelog.

0.2.4 (2026-09-07)

Bug Fixes

• babel: set inputSourceMap: false to avoid combining source map twice (#131) (249a7d2)
• deps: update all non-major dependencies (#124) (6373896), references #8203
• deps: update all non-major dependencies (#65) (465fb38)
• deps: update all non-major dependencies (#88) (0032957), references #8203 #8203 #8203 #8203
• deps: update all non-major dependencies (#99) (fa5b6df), references #8203 #8203 #8203 #8203 #8203 #8203 #8203
• deps: update rolldown-related dependencies (#59) (e0e474c)
• deps: update rolldown-related dependencies (#66) (717a2a6)
• deps: update rolldown-related dependencies (#78) (6a57129)

Miscellaneous Chores

• deps: update all non-major dependencies (#106) (6b89bca), references #8203 #8203
• deps: update all non-major dependencies (#77) (0b70858)
• deps: update all non-major dependencies (#90) (b73d0dd), references #8203 #8203
• deps: update all non-major dependencies (#92) (59dcaf4), references #8203 #8203 #8203 #8203
• deps: update rolldown-related dependencies (#128) (c0365e0)
• use pnpm catalog for some packages (#82) (d717e25)

Commits

• 49dc455 release: plugin-babel@0.2.4
• 249a7d2 fix(babel): set inputSourceMap: false to avoid combining source map twice (...
• c0365e0 chore(deps): update rolldown-related dependencies (#128)
• 6373896 fix(deps): update all non-major dependencies (#124)
• 6b89bca chore(deps): update all non-major dependencies (#106)
• fa5b6df fix(deps): update all non-major dependencies (#99)
• 59dcaf4 chore(deps): update all non-major dependencies (#92)
• b73d0dd chore(deps): update all non-major dependencies (#90)
• 0032957 fix(deps): update all non-major dependencies (#88)
• d717e25 chore: use pnpm catalog for some packages (#82)
• Additional commits viewable in compare view

Updates @tanstack/eslint-plugin-query from 5.102.8 to 5.103.1

Release notes

Sourced from @​tanstack/eslint-plugin-query's releases.

@​tanstack/eslint-plugin-query@​5.103.1

No release notes provided.

@​tanstack/eslint-plugin-query@​5.103.0

No release notes provided.

Changelog

Sourced from @​tanstack/eslint-plugin-query's changelog.

5.103.1

5.103.0

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• See full diff in compare view

Updates @types/node from 26.4.1 to 26.6.1

Commits

• See full diff in compare view

Updates happy-dom from 20.13.2 to 20.14.5

Release notes

Sourced from happy-dom's releases.

v20.14.5

👷‍♂️ Patch fixes

• Preserve character references in comment data - By @​hampustagerud in task #2409

v20.14.4

👷‍♂️ Patch fixes

• End comments at the first comment end tag when it overlaps a comment start tag - By @​hampustagerud in task #2407

v20.14.3

👷‍♂️ Patch fixes

• Avoids cloning all properties in CSSPropertyManager.toString - By @​erictheswift in task #2363

v20.14.2

👷‍♂️ Patch fixes

• Fixes regression where not all CSS variables where resolved in getComputedStyle() - By @​klaesra in task #2344

v20.14.1

👷‍♂️ Patch fixes

• Invalidate the computed style cache for the whole subtree - By @​matmannion and @​capricorn86 in task #2366

v20.14.0

🎨 Features

• Improves computed style cache - By @​capricorn86 in task #2357

Commits

• 0d4cdbe fix: #2409 Preserve character references in comment data (#2410)
• 9c920a4 fix: #2407 End comments at the first comment end tag when it overlaps a com...
• 5fb1df3 fix: #2363 Avoids cloning all properties in CSSPropertyManager.toString() (...
• de0a1e9 fix: #2344 Resolve every var() in a value, not only the first one (#2395)
• 64b8b94 fix: #2366 Invalidate the computed style cache for the whole subtree (#2367)
• eac5a38 feat: #2357 Improves computed style cache (#2358)
• See full diff in compare view

Updates prettier from 3.9.6 to 3.9.7

Release notes

Sourced from prettier's releases.

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

// Input
const foo = html`
            <div>${getText({
            value,
            })}</div>
`;
// Prettier 3.9.6 (first format)
const foo = html&lt;div&gt; ${getText({ value, })} &lt;/div&gt;;
// Prettier 3.9.6 (second format)
const foo = html`
<div>
</tr></table>

... (truncated)

Commits

• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• 3404375 Update @typescript-eslint/typescript-estree to v8.70.0
• c60f106 Angular: Support @boundary / @error error boundaries (#20015)
• 297117a Fix HTML block indentation drift in markdown list items (#19987)
• 0df4e49 Fix in...

  Description has been truncated