Skip to content

Bump the frontend-security-and-maintenance group across 1 directory with 16 updates - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-ecb07c0266
Closed

Bump the frontend-security-and-maintenance group across 1 directory with 16 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-ecb07c0266

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown

Bumps the frontend-security-and-maintenance group with 15 updates in the /web directory:

Package From To
@ruby/3.3-wasm-wasi 2.9.3-2.9.4 2.10.1
lucide-react 1.26.0 1.31.0
monaco-editor 0.55.1 0.56.0
@testing-library/user-event 14.6.1 14.6.4
@types/node 24.13.3 26.2.0
@types/react 19.2.17 19.2.18
@types/react-dom 19.2.3 19.2.4
@vitejs/plugin-react 6.0.4 6.0.5
eslint 10.8.0 10.8.1
eslint-plugin-react-refresh 0.5.3 0.5.4
globals 17.7.0 17.11.0
jsdom 26.1.0 30.0.1
typescript 6.0.3 7.0.2
typescript-eslint 8.65.0 8.67.0
vite 8.0.16 8.2.1

Updates @ruby/3.3-wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @​ruby/3.3-wasm-wasi's releases.

2.10.1

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c
Commits

Updates @ruby/wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @​ruby/wasm-wasi's releases.

2.10.1

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source
4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c
Commits

Updates lucide-react from 1.26.0 to 1.31.0

Release notes

Sourced from lucide-react's releases.

Version 1.31.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Version 1.28.0

... (truncated)

Commits

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.
Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Updates @testing-library/user-event from 14.6.1 to 14.6.4

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

v14.6.2

14.6.2 (2026-08-03)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/user-event since your current version.


Updates @types/node from 24.13.3 to 26.2.0

Commits

Updates @types/react from 19.2.17 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

Updates @vitejs/plugin-react from 6.0.4 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Commits

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)
  • 69bb948 docs: Update README (GitHub Actions Bot)

Chores

  • 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
  • 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
  • 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
  • ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
  • f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
  • 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
  • d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
  • 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
  • 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
  • 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
  • 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
  • eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
  • 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
  • f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
  • d086293 test: add error locations to no-undef (#21147) (JIYEON)
  • cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
  • 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
  • 7c1e175 test: add error locations to require-await (#21145) (Grit)
  • 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
  • 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
  • 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)
Commits

Updates eslint-plugin-react-refresh from 0.5.3 to 0.5.4

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.4

  • Add instant to allowExportNames in Next config #112
Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.4

  • Add instant to allowExportNames in Next config #112
Commits

Updates globals from 17.7.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

Updates jsdom from 26.1.0 to 30.0.1

Release notes

Sourced from jsdom's releases.

v30.0.1

  • Fixed getComputedStyle() with calc() and other functions throwing an exception, which regressed in v30.0.0. (@​asamuzaK)
  • Sped up up range operations on large documents (@​leonidaz)

v30.0.0

Breaking changes:

  • Node.js minimum version raised to ^22.22.2 || ^24.15.0 || >=26.0.0.

Other changes:

  • Added CSS.escape() and CSS.supports() functions. (@​asamuzaK)
  • Added 'background-position-x' and 'background-position-y' CSS properties. (@​olagokemills)
  • Fixed getComputedStyle() to convert length values into pixels. (@​asamuzaK)
  • Fixed CSS function serialization, e.g., in the return value of getPropertyValue(). (@​asamuzaK)
  • Fixed the type of error thrown by document.evaluate() (@​dokson)

v29.1.1

  • Fixed 'border-radius' computed style serialization. (@​asamuzaK)
  • Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@​asamuzaK)
  • Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@​asamuzaK)

v29.1.0

  • Added basic support for the ratio CSS type. (@​asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)

v29.0.2

  • Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@​asamuzaK)
  • Fixed CSS 'background' and 'border' shorthand parsing. (@​asamuzaK)

v29.0.1

  • Fixed CSS parsing of 'border', 'background', and their sub-shorthands containing keywords or var(). (@​asamuzaK)
  • Fixed getComputedStyle() to return a more functional CSSStyleDeclaration object, including indexed access support, which regressed in v29.0.0.

v29.0.0

Breaking changes:

  • Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

  • Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.
  • Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.
  • Added cssMediaRule.matches and cssSupportsRule.matches getters.
  • Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.
  • Added cssKeyframeRule.keyText getter/setter validation.
  • Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.
  • Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.
  • Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.
  • Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@​thypon)

... (truncated)

Commits
  • 6584485 30.0.1
  • 0c51df6 Update dependencies and dev dependencies
  • 32adb34 Bump @​asamuzakjp/dom-selector
  • 70f014a Speed up range operations on large documents
  • 250d7ee Partially fix getComputedStyle with calc()
  • 20a01fc 30.0.0
  • 8c8e583 Precompute WPT expectation matches
  • f32245c Bump Node.js floor and dependencies
  • 03ef23b Add background-position longhands
  • ded056f Test CSS.escape() with numeric IDs
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates typescript-eslint from 8.65.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

  • typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
  • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
  • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
  • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
  • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
  • website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vite from 8.0.16 to 8.2.1

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.mdDescription has been truncated

Greptile Summary

This PR updates the frontend dependency set and regenerates its npm lockfile.

  • Upgrades runtime dependencies including Ruby WASM, Lucide, and Monaco Editor.
  • Upgrades the Vite, TypeScript, ESLint, jsdom, and testing toolchain.
  • Introduces an unsupported TypeScript/typescript-eslint version pairing that can block clean CI installation.

Confidence Score: 4/5

The PR should not merge until TypeScript and typescript-eslint are aligned, because a clean frontend dependency installation can reject the current peer dependency tree.

The lockfile resolves TypeScript 7.0.2 even though typescript-eslint 8.67.0 and its ESLint plugin declare support only below TypeScript 6.1, and CI installs this tree with npm ci before every frontend check.

Files Needing Attention: web/package.json and web/package-lock.json

Important Files Changed

Filename Overview
web/package.json Updates sixteen frontend dependencies, but TypeScript 7.0.2 exceeds typescript-eslint 8.67.0’s declared peer range.
web/package-lock.json Regenerates the resolved dependency tree and records the incompatible TypeScript 7.0.2/typescript-eslint 8.67.0 pairing.
Prompt To Fix All With AI
### Issue 1
web/package.json:43-44
**Unsupported TypeScript peer version**

When CI runs `npm ci`, the project pairs TypeScript 7.0.2 with typescript-eslint 8.67.0, whose declared TypeScript range is `>=4.8.4 <6.1.0`, causing npm to reject the incompatible peer dependency tree before frontend tests, linting, or builds can run.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Reviews (1): Last reviewed commit: "Bump the frontend-security-and-maintenan..." | Re-trigger Greptile

Greptile also left 1 inline comment on this PR.

…ith 16 updates

Bumps the frontend-security-and-maintenance group with 15 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@ruby/3.3-wasm-wasi](https://github.com/ruby/ruby.wasm) | `2.9.3-2.9.4` | `2.10.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.26.0` | `1.31.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.2.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.4` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.11.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.0.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.67.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.2.1` |



Updates `@ruby/3.3-wasm-wasi` from 2.9.3-2.9.4 to 2.10.1
- [Release notes](https://github.com/ruby/ruby.wasm/releases)
- [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1)

Updates `@ruby/wasm-wasi` from 2.9.3-2.9.4 to 2.10.1
- [Release notes](https://github.com/ruby/ruby.wasm/releases)
- [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1)

Updates `lucide-react` from 1.26.0 to 1.31.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react)

Updates `monaco-editor` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.4
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.4)

Updates `@types/node` from 24.13.3 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `eslint` from 10.8.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.8.1)

Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.4)

Updates `globals` from 17.7.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.11.0)

Updates `jsdom` from 26.1.0 to 30.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v30.0.1)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `typescript-eslint` from 8.65.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint)

Updates `vite` from 8.0.16 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: "@ruby/3.3-wasm-wasi"
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@ruby/wasm-wasi"
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: lucide-react
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: monaco-editor
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-security-and-maintenance
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-security-and-maintenance
- dependency-name: typescript-eslint
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-security-and-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 15, 2026
@netlify

netlify Bot commented Aug 15, 2026

Copy link
Copy Markdown

Deploy Preview for hafa-code failed.

Name Link
🔨 Latest commit e75c9ae
🔍 Latest deploy log https://app.netlify.com/projects/hafa-code/deploys/6a8078f3ef2a5b00082c58c0

Comment thread web/package.json
Comment on lines +43 to +44
"typescript": "~7.0.2",
"typescript-eslint": "^8.67.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Unsupported TypeScript peer version

When CI runs npm ci, the project pairs TypeScript 7.0.2 with typescript-eslint 8.67.0, whose declared TypeScript range is >=4.8.4 <6.1.0, causing npm to reject the incompatible peer dependency tree before frontend tests, linting, or builds can run.

Prompt To Fix With AI
This is a comment left during a code review.
Path: web/package.json
Line: 43-44

Comment:
**Unsupported TypeScript peer version**

When CI runs `npm ci`, the project pairs TypeScript 7.0.2 with typescript-eslint 8.67.0, whose declared TypeScript range is `>=4.8.4 <6.1.0`, causing npm to reject the incompatible peer dependency tree before frontend tests, linting, or builds can run.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

@dependabot @github

dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 22, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-ecb07c0266 branch August 22, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants