Repository navigation
Update npm dependencies - #907
Merged
Merged
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
✅ Deploy Preview for ucmacm ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
0.5.0→0.5.10.5.0→0.5.10.5.0→0.5.15.104.2→5.104.35.104.45.104.2→5.104.35.104.41.170.44→1.170.451.168.45→1.168.4710.12.0→10.13.04.9.0→4.9.11.87.0→1.88.05.26.5→5.28.05.28.15.26.5→5.28.05.28.15.26.5→5.28.05.28.15.26.5→5.28.05.28.11.56.0→1.59.024.21.0→24.22.012.13.0→12.14.019.3.0→19.3.119.3.0→19.3.120.1.3→20.1.44.21.4→4.22.01.0.5→1.0.6Release Notes
clauderic/dnd-kit (@dnd-kit/dom)
v0.5.1Compare Source
Patch Changes
#2153
22a39efThanks @pedroapfilho! - TheAccessibilityplugin no longer setsaria-pressedon draggable activators whose role isn'tbutton, such asrole="tab", where the attribute isn't allowed.#2094
d3f965fThanks @timagixe! - Match KeyboardSensor shortcuts against KeyboardEvent.key so keyboard controls respect keyboard layouts and operating system key remaps. Common legacy Key_ and Digit_ configs still normalize.#2149
69987d5Thanks @ManiShah7! - Fix staleinitialIndexandinitialGrouponSortableinonBeforeDragStartafter the item has moved. Add aninitializationPendinggetter to the drag operation status.#2076
e00be08Thanks @timagixe! - Avoid requiring ResizeObserver at import time when importing @dnd-kit/dom/modifiers in DOM-like test environments.#2151
cf4fb8aThanks @cpruijsen! - Record pointer moves received while a drag operation is initializing so the drag position catches up when the operation starts, instead of staying at the pointerdown position until the next pointer move.#2152
d5071ecThanks @Bhavani2016! - Prevent body-targeted clicks following pointer drops from unexpectedly dismissing popups, while preserving iframe dragging.#2126
8a1c807Thanks @waterWang! - Reuse each scroll container's position measurement during auto-scrolling to avoid duplicate layout reads while preserving the existing scroll utility argument order.#2142
bce5778Thanks @chasegiunta! - Keep the Feedback plugin's styles injected between drag operations instead of adding and removing its<style>element on every drag. Each stylesheet change forces the browser to recalculate styles for the whole document, which caused jank at the start and end of drags on large pages.StyleInjector.register()accepts a newretainoption for rules that are inert outside of a drag, and only adds or removes the stylesheets whose target roots actually changed.#2131
037663bThanks @NektarTheo! - Respecttransition: nullin the React, Vue, Solid and Svelte sortable bindings. The bindings previously mergeddefaultSortableTransitionbefore constructing or updating the coreSortable, which replaced an explicitnullwith the default transition, so sortable items kept animating. They now use the newresolveSortableTransitionhelper exported from@dnd-kit/dom/sortable, which preservesnullwhile still merging partial transitions with the defaults.#2134
3ff8588Thanks @timagixe! - Preserve custom data types when narrowing withisSortableandisSortableOperationinstead of widening them toany. Source and target data types are inferred independently for sortable operations.Updated dependencies [
69987d5]:TanStack/query (@tanstack/eslint-plugin-query)
v5.104.3Compare Source
No changes in this release.
TanStack/query (@tanstack/react-query)
v5.104.3Compare Source
Patch Changes
0f15bc9]:TanStack/router (@tanstack/react-router)
v1.170.45Compare Source
Patch Changes
18154b1]:TanStack/router (@tanstack/router-plugin)
v1.168.47Compare Source
Patch Changes
18154b1]:v1.168.46Compare Source
Patch Changes
923d98b]:eslint/eslint (eslint)
v10.13.0Compare Source
Features
48d5cc4feat: report references inside IIFEs inno-use-before-define(#21238) (Irfan fandi)a39d9fbfeat: addglobalThistono-obj-calls(#21382) (synthex-byte)66ac583feat: checkyield*expressions inno-unsafe-optional-chaining(#21399) (xbinaryx)Bug Fixes
87bd2cefix: avoid redeclaredletwhenno-varandone-varfix together (#21389) (Daniel Pinto)Documentation
4783a68docs: Update README (GitHub Actions Bot)43f0ac9docs: clarify parameter description ingetText(#21287) (lumir)Chores
b59d889chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])95e51a0ci: re-enable@typescript-eslint/typescript-eslintin ecosystem tests (#21410) (Francesco Trotta)317fcb3chore: update ecosystem plugins (#21409) (ESLint Bot)b92decfperf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)47b7063chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])e5aea41chore: update ecosystem plugins (#21390) (ESLint Bot)schoero/eslint-plugin-better-tailwindcss (eslint-plugin-better-tailwindcss)
v4.9.1Compare Source
compare changes
Fixes
❤️ Contributors
oxc-project/eslint-plugin-oxlint (eslint-plugin-oxlint)
v1.88.0Compare Source
What's Changed
eslint-plugin-unicornlint rules by @Sysix in #796buildFromConfigFileto load oxlint js/ts config files by @Sysix in #797oxlintts types forbuildFromOxlintConfigby @Sysix in #798New Contributors
Full Changelog: oxc-project/eslint-plugin-oxlint@v1.87.0...v1.88.0
Rel1cx/eslint-react (eslint-plugin-react-dom)
v5.28.0Compare Source
✨ New
@eslint-react/eslint-plugin: the general-purpose presets now enable JSX syntax support vialanguageOptions.parserOptions.ecmaFeatures.jsx: true, so you no longer need to configure it yourself. (#2049) Affected presets:recommendedrecommended-typescriptrecommended-type-checkedstrictstrict-typescriptstrict-type-checked🏗️ Internal
fumadocs-coreandfumadocs-uito16.17.5, andlucide-reactto1.58.0.Full Changelog: Rel1cx/eslint-react@v5.27.4...v5.28.0
v5.27.4Compare Source
🐞 Fixes
@eslint-react/jsx:resolveAttributeValuenow handles a parser-toleratedJSXFragmentin attribute value position (ex:<a href=<></> />), reporting it as kind"element"instead of falling through toundefined; as a result,react-dom/no-missing-iframe-sandboxnow reports<iframe sandbox=<></> />instead of silently skipping it. (#2048)Full Changelog: Rel1cx/eslint-react@v5.27.3...v5.27.4
v5.27.3Compare Source
🐞 Fixes
react-jsx/no-key-after-spread: the fast-path text check now matcheskeyassignments with whitespace around=(ex:<div {...props} key = {id} />or a newline before=), so such elements are no longer silently skipped. (#2043) Thanks to @amir-rahmanii!react-jsx/no-children-prop: achildrenprop alongside nested children content (ex:<div children="x">y</div>,createElement("div", { children: "x" }, "y")) is no longer reported by this rule — that conflict case belongs toreact-jsx/no-children-prop-with-children— removing the unsafe merge suggestion and the duplicate diagnostics. (#2044) Thanks to @amir-rahmanii!react-jsx/no-children-prop-with-children: empty expression containers (ex:{},{/* comment */}) are no longer treated as meaningful children, so<div children="x">{/* comment */}</div>is no longer reported. (#2045) Thanks to @amir-rahmanii!📝 Documentation
react-naming-convention/ref-name: corrected theadditionalRefHooksexample to use the/pattern/flagsRegExp string form; a bare(a|b)string is treated as exact equality and never matches. (#2042) Thanks to @amir-rahmanii!🏗️ Internal
@eslint-react/jsx:hasChildrennow treats empty expression containers as non-meaningful, aligned withgetChildren. (#2045)react-x: refactored the internals ofset-state-in-effect,set-state-in-render, andstatic-componentsfor readability; no behavior change. (#2041)vitestto5.0.5,nextto16.4.2,fumadocs-coreandfumadocs-uito16.17.4, andundicito8.12.2.Full Changelog: Rel1cx/eslint-react@v5.27.2...v5.27.3
v5.27.2Compare Source
🏗️ Internal
@tsconfig/node20and@types/nodedependencies to the workspace packages. (#2040)effectand@effect/platform-nodeto4.0.5,import-integrity-lintto1.3.1, andsort-package-jsonto4.1.0. (#2040)Full Changelog: Rel1cx/eslint-react@v5.27.1...v5.27.2
v5.27.1Compare Source
🐞 Fixes
componentDidMount = () => { this.setState(...) }, including type-expression-wrapped values) are now reported just like the method shorthand form. (#2039) Affected rules:react-x/no-set-state-in-component-did-mountreact-x/no-set-state-in-component-did-updatereact-x/no-set-state-in-component-will-updateuseEffectcall is nested in an outerreturn(ex:return useEffect(() => () => { ... })), so resources released there are no longer reported as leaked. (#2039) Affected rules:react-web-api/no-leaked-event-listenerreact-web-api/no-leaked-fetchreact-web-api/no-leaked-intersection-observerreact-web-api/no-leaked-intervalreact-web-api/no-leaked-resize-observerreact-web-api/no-leaked-timeout🏗️ Internal
@eslint-react/ast: added theCheck.isFunctionOrClassandCheck.isTypeOrChainExpressionhelpers; parent lookups acrossast,core, and the rules are now bounded at enclosing function/class boundaries. (#2039)@eslint-react/core:isUseEffectSetupCallbackandisUseEffectCleanupCallbackreimplemented on bounded parent lookups. (#2039)Full Changelog: Rel1cx/eslint-react@v5.27.0...v5.27.1
v5.27.0🐞 Fixes
react-web-api/no-leaked-event-listener: cleanups returned through conditional expressions (ex:return cond ? () => window.removeEventListener(...) : null) are now recognized and no longer reported. (#2038)react-web-api/no-leaked-fetch: effect setups wrapped in type expressions (ex:useEffect((() => { fetch(...) }) as any, [])) are now recognized. (#2038)react-debug/function-component: computed string-literaldisplayNamekeys (ex:App["displayName"] = "...") are now recognized. (#2038)📝 Documentation
🏗️ Internal
@eslint-react/core: accuracy and consistency fixes in detection helpers. (#2038)react-x: the customtslconfig now enforces the fact-based layer dependency order. (#2036)reactandreact-domto19.3.1, andnextto16.4.1.Full Changelog: Rel1cx/eslint-react@v5.26.7...v5.27.0
v5.26.7Compare Source
🏗️ Internal
@eslint-react/core: collectors now use the node's source range start as the map key, replacing the shared counter, keys are stable across repeated lints, traceable to source positions when debugging, and slightly cheaper than stringified numbers. (#2033)Full Changelog: Rel1cx/eslint-react@v5.26.6...v5.26.7
v5.26.6Compare Source
🏗️ Internal
@eslint-react/core: component and hook collectors now use sequential integer keys instead of randomrandomByteshex keys, removingnode:cryptofrom the lint hot path. (#2032) Thanks to @kurtextrem!effectto4.0.4,ts-patternto5.9.2,fumadocs-coreandfumadocs-uito16.17.3,lucide-reactto1.57.0,oxlintto1.88.0,typedoc-plugin-markdownto4.14.0, andundicito8.12.1.New Contributors
Full Changelog: Rel1cx/eslint-react@v5.26.5...v5.26.6
lucide-icons/lucide (lucide-react)
v1.59.0: Version 1.59.0Compare Source
What's Changed
chess-queenicon by @karsa-mistmere in #4613Full Changelog: lucide-icons/lucide@1.58.0...1.59.0
v1.58.0: Version 1.58.0Compare Source
What's Changed
@ucide/svelteby @ericfennis in #5005barrelicon by @karsa-mistmere in #4639certificateicon by @rrod497 in #4327New Contributors
Full Changelog: lucide-icons/lucide@1.57.0...1.58.0
v1.57.0: Version 1.57.0Compare Source
What's Changed
folder-userandfolder-usericons by @rrod497 in #4603calendar-chevrons-lefticon by @karsa-mistmere in #5001users-collaborationicon by @rrod497 in #4922Belarusian rubleicon by @js-best in #4984circle-fading-playicon by @tatianatsiguleva in #4990cpu-aiicon by @signalgridco in #4992guitar-electricicon by @rrod497 in #4917graph-staricon by @Nitero in #4983perfumeicon by @rrod497 in #4426New Contributors
Full Changelog: lucide-icons/lucide@1.56.0...1.57.0
nodejs/node (node)
v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95Compare Source
Notable Changes
ddbf974b47] - (SEMVER-MINOR) crypto: addcrypto.parsePKCS12()(Brian Muenzenmeyer) #65627c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593a7f8de6362] - (SEMVER-MINOR) net: support sendingnet.BoundSocketto threads and child processes (Guy Bedford) #6472560c3eb61bd] - (SEMVER-MINOR) perf_hooks: implementSlidingWindowHistogram(James M Snell) #658256b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #6580675456a3512] - (SEMVER-MINOR) perf_hooks: implement HistogrammeanCIAPI (James M Snell) #6560672d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #6543441161dda87] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.close()(Guilherme Araújo) #64232adbc757d70] - (SEMVER-MINOR) sqlite: addStatementSync.prototype[Symbol.dispose]()(Guilherme Araújo) #64232241339f072] - (SEMVER-MINOR) src,lib: addutil.markPromiseAsHandled(James M Snell) #6580563b0974d9e] - (SEMVER-MINOR) util: implementutil.throttle(James M Snell) #65899a3bbb5a26f] - (SEMVER-MINOR) util: implementdebounce(James M Snell) #65899Commits
e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #6592210b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #6559421fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #65518fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #65905a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #6602394e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #657447a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #65826c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #657974b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #65456f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #66082146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #6550613987f4418] - crypto: remove redundentstd::movecall (Antoine du Hamel) #66111ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #661088feccc5e22] - crypto: use provider EC group names (Filip Skokan) #66108764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #6610850ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #6610856c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #66108a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #65966ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #656278e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #657595c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #65908c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #66108253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #6589280a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #659085b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #65908ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #65908684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #65908f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #65704624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #65704e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #65645db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #655532b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #634115a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222191ebfb26c] - crypto: fix public PKCS8 export error (한국) #65609b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #6555079509c25a4] - crypto: correct CCM decryption FConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.