Skip to content

build(deps): bump the ui-dependencies group across 1 directory with 28 updates#45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/ui-dependencies-2f1264ccc5
Open

build(deps): bump the ui-dependencies group across 1 directory with 28 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/ui-dependencies-2f1264ccc5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the ui-dependencies group with 28 updates in the /ui directory:

Package From To
@radix-ui/react-dialog 1.1.16 1.1.17
@radix-ui/react-dropdown-menu 2.1.17 2.1.18
@radix-ui/react-popover 1.1.16 1.1.17
@radix-ui/react-progress 1.1.9 1.1.10
@radix-ui/react-scroll-area 1.2.11 1.2.12
@radix-ui/react-select 2.3.0 2.3.1
@radix-ui/react-separator 1.1.9 1.1.10
@radix-ui/react-slot 1.2.5 1.3.0
@radix-ui/react-tabs 1.1.14 1.1.15
@radix-ui/react-tooltip 1.2.9 1.2.10
@visx/group 3.12.0 4.0.0
@visx/hierarchy 3.12.0 4.0.0
@visx/responsive 3.12.0 4.0.0
@visx/scale 3.12.0 4.0.0
dompurify 3.4.8 3.4.11
lucide-react 1.17.0 1.21.0
react-router-dom 7.17.0 7.18.0
tailwindcss 4.3.0 4.3.1
@playwright/test 1.60.0 1.61.0
@tailwindcss/postcss 4.3.0 4.3.1
@tailwindcss/typography 0.5.19 0.5.20
@types/node 25.9.2 26.0.0
@vitest/coverage-v8 4.1.8 4.1.9
eslint 10.4.1 10.5.0
eslint-plugin-react-refresh 0.5.2 0.5.3
prettier 3.8.3 3.8.4
typescript-eslint 8.60.1 8.61.1
vitest 4.1.8 4.1.9

Updates @radix-ui/react-dialog from 1.1.16 to 1.1.17

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.17

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12
Commits

Updates @radix-ui/react-dropdown-menu from 2.1.17 to 2.1.18

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.18

  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6
Commits

Updates @radix-ui/react-popover from 1.1.16 to 1.1.17

Changelog

Sourced from @​radix-ui/react-popover's changelog.

1.1.17

  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12
Commits

Updates @radix-ui/react-progress from 1.1.9 to 1.1.10

Changelog

Sourced from @​radix-ui/react-progress's changelog.

1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6
Commits

Updates @radix-ui/react-scroll-area from 1.2.11 to 1.2.12

Changelog

Sourced from @​radix-ui/react-scroll-area's changelog.

1.2.12

  • Stabilized the viewport style tag unless the nonce changes.
  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6
Commits

Updates @radix-ui/react-select from 2.3.0 to 2.3.1

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.1

  • Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.
  • Fixed a bug where typeahead search resulted in focusing an element that no longer exists.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6
Commits

Updates @radix-ui/react-separator from 1.1.9 to 1.1.10

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6
Commits

Updates @radix-ui/react-slot from 1.2.5 to 1.3.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>("Slot");
Commits

Updates @radix-ui/react-tabs from 1.1.14 to 1.1.15

Changelog

Sourced from @​radix-ui/react-tabs's changelog.

1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-roving-focus@1.1.13
Commits

Updates @radix-ui/react-tooltip from 1.2.9 to 1.2.10

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.10

  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6
Commits

Updates @visx/group from 3.12.0 to 4.0.0

Release notes

Sourced from @​visx/group's releases.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Changelog

Sourced from @​visx/group's changelog.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​visx/group since your current version.


Updates @visx/hierarchy from 3.12.0 to 4.0.0

Release notes

Sourced from @​visx/hierarchy's releases.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Changelog

Sourced from @​visx/hierarchy's changelog.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​visx/hierarchy since your current version.


Updates @visx/responsive from 3.12.0 to 4.0.0

Release notes

Sourced from @​visx/responsive's releases.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Changelog

Sourced from @​visx/responsive's changelog.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​visx/responsive since your current version.


Updates @visx/scale from 3.12.0 to 4.0.0

Release notes

Sourced from @​visx/scale's releases.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Changelog

Sourced from @​visx/scale's changelog.

v4.0.0 (2026-06-11)

🚀 Enhancements

  • Add react@19 to peer dependencies of all packages #1889
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • Breaking: Require React 18 or 19 #2009

🐛 Bug Fix

  • Add return type to withBoundingRects #1837
  • fix(demo): fix delaunay-voronoi demo #1758
  • Fix for stacked bars with a mix of strings and numbers in the x-axis #1884
  • fix(xychart): remove console.debug message for overriding existing registry keys. fixes #1860 #1934
  • React 19 Support #1968
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • fix(release): recover alpha.14 publish #2008
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

💥 Breaking Changes

  • Toolchain updates. Node 18, TypeScript 5, Next 13 #1938
  • Remove prop-types #1953
  • Upgrade to Yarn 4 #1954
  • Upgrade d3-shape, d3-path to 3 #1960
  • React 19 Support #1968
  • Breaking: Require React 18 or 19 #2009

📝 Documentation

  • docs: remove remix button from README usage section #1944
  • refactor(deps): remove lodash package usage #2006
  • fix(release): republish alpha.12 as alpha.13 #2007
  • Breaking: Require React 18 or 19 #2009
  • Resolve Dependabot alerts #2010
  • Resolve brace-expansion Dependabot alert #2011

🏠 Internal

  • Upgrade babel #1891
  • internal: Remove Enzyme from visx #1893
  • [workflows] Update actions/cache from v1 to v4.3.0 #1926
  • internal(test): reorder expected output in combineBarStackData tests #1933
  • internal(demo): update footer #1932
  • perf(demo): lazy render example tiles #1896

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​visx/scale since your current version.


Updates dompurify from 3.4.8 to 3.4.11

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.11

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
  • Updated up the linting tool-chain and removed now-redundant lint directives
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

DOMPurify 3.4.10

  • Refactored codebase for clarity: extracted the public type declarations into types.ts
  • Decomposed the three largest sanitizer functions into focused helpers
  • Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
  • Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
  • Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
  • Reduced CI cost by running the full three-engine browser suite once per PR
  • Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
  • Documented the bench and test:happydom scripts in the README
  • Completed the Attack Classes & Bypass History wiki page
  • Bumped several dependencies where possible

DOMPurify 3.4.9

  • Further improved the handling of Trusted Types config options, thanks @​offset
  • Further improved the handling of IN_PLACE sanitization, thanks @​mozfreddyb
  • Added more test coverage for IN_PLACE and Trusted Types related usage
  • Bumped several dependencies where possible
  • Updated README and wiki with more accurate documentation & attack samples
Commits

Updates lucide-react from 1.17.0 to 1.21.0

Release notes

Sourced from lucide-react's releases.

Version 1.21.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.20.0...1.21.0

Version 1.20.0

What's Changed

@dependabot
build(deps): bump the ui-dependencies group across 1 directory with 2…
e4371fa 
…8 updates

Bumps the ui-dependencies group with 28 updates in the /ui directory:

| Package | From | To |
| --- | --- | --- |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.16` | `1.1.17` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.17` | `2.1.18` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.16` | `1.1.17` |
| [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.9` | `1.1.10` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.11` | `1.2.12` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.0` | `2.3.1` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.9` | `1.1.10` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.5` | `1.3.0` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.14` | `1.1.15` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.9` | `1.2.10` |
| [@visx/group](https://github.com/airbnb/visx) | `3.12.0` | `4.0.0` |
| [@visx/hierarchy](https://github.com/airbnb/visx) | `3.12.0` | `4.0.0` |
| [@visx/responsive](https://github.com/airbnb/visx) | `3.12.0` | `4.0.0` |
| [@visx/scale](https://github.com/airbnb/visx) | `3.12.0` | `4.0.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.8` | `3.4.11` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.17.0` | `1.21.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.17.0` | `7.18.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.0` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.0` | `4.3.1` |
| [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.19` | `0.5.20` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.0.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.9` |
| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.5.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.2` | `0.5.3` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.8.4` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.60.1` | `8.61.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` |



Updates `@radix-ui/react-dialog` from 1.1.16 to 1.1.17
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.17 to 2.1.18
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-popover` from 1.1.16 to 1.1.17
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-progress` from 1.1.9 to 1.1.10
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress)

Updates `@radix-ui/react-scroll-area` from 1.2.11 to 1.2.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area)

Updates `@radix-ui/react-select` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-separator` from 1.1.9 to 1.1.10
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator)

Updates `@radix-ui/react-slot` from 1.2.5 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-tabs` from 1.1.14 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-tooltip` from 1.2.9 to 1.2.10
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@visx/group` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/airbnb/visx/releases)
- [Changelog](https://github.com/airbnb/visx/blob/master/CHANGELOG.md)
- [Commits](airbnb/visx@v3.12.0...v4.0.0)

Updates `@visx/hierarchy` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/airbnb/visx/releases)
- [Changelog](https://github.com/airbnb/visx/blob/master/CHANGELOG.md)
- [Commits](airbnb/visx@v3.12.0...v4.0.0)

Updates `@visx/responsive` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/airbnb/visx/releases)
- [Changelog](https://github.com/airbnb/visx/blob/master/CHANGELOG.md)
- [Commits](airbnb/visx@v3.12.0...v4.0.0)

Updates `@visx/scale` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/airbnb/visx/releases)
- [Changelog](https://github.com/airbnb/visx/blob/master/CHANGELOG.md)
- [Commits](airbnb/visx@v3.12.0...v4.0.0)

Updates `dompurify` from 3.4.8 to 3.4.11
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.8...3.4.11)

Updates `lucide-react` from 1.17.0 to 1.21.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.21.0/packages/lucide-react)

Updates `react-router-dom` from 7.17.0 to 7.18.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.0/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.0/packages/react-router-dom)

Updates `tailwindcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `@playwright/test` from 1.60.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.0)

Updates `@tailwindcss/postcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@tailwindcss/typography` from 0.5.19 to 0.5.20
- [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss-typography@v0.5.19...v0.5.20)

Updates `@types/node` from 25.9.2 to 26.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.9
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/coverage-v8)

Updates `eslint` from 10.4.1 to 10.5.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.1...v10.5.0)

Updates `eslint-plugin-react-refresh` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.2...v0.5.3)

Updates `prettier` from 3.8.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.8.4)

Updates `typescript-eslint` from 8.60.1 to 8.61.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/typescript-eslint)

Updates `vitest` from 4.1.8 to 4.1.9
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest)

---
updated-dependencies:
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-progress"
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-scroll-area"
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-separator"
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@visx/group"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ui-dependencies
- dependency-name: "@visx/hierarchy"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ui-dependencies
- dependency-name: "@visx/responsive"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ui-dependencies
- dependency-name: "@visx/scale"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ui-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: lucide-react
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@tailwindcss/typography"
  dependency-version: 0.5.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: eslint
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: prettier
  dependency-version: 3.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-dependencies
- dependency-name: vitest
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 22, 2026
@codacy-production

codacy-production Bot commented Jun 22, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants