Skip to content

chore: bump the npm-non-major group across 1 directory with 35 updates#859

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-non-major-d06bca77c0
Open

chore: bump the npm-non-major group across 1 directory with 35 updates#859
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-non-major-d06bca77c0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026 •
edited
Loading

Bumps the npm-non-major group with 32 updates in the / directory:

Package From To
@arborium/arborium 2.16.0 2.17.0
@atlaskit/pragmatic-drag-and-drop 1.7.9 1.8.1
@sentry/react 10.43.0 10.53.0
@tanstack/react-query 5.90.21 5.100.10
@tanstack/react-query-devtools 5.91.3 5.100.10
@tanstack/react-virtual 3.13.21 3.13.24
@vanilla-extract/css 1.18.0 1.20.1
@vanilla-extract/vite-plugin 5.1.4 5.2.2
dayjs 1.11.19 1.11.20
framer-motion 12.34.3 12.38.0
jotai 2.18.1 2.20.0
marked 18.0.2 18.0.3
pdfjs-dist 5.5.207 5.7.284
react-aria 3.47.0 3.48.0
react-colorful 5.6.1 5.7.0
slate 0.123.0 0.124.1
slate-dom 0.123.0 0.124.1
slate-react 0.123.0 0.124.0
virtua 0.48.8 0.49.1
workbox-precaching 7.4.0 7.4.1
@cloudflare/vite-plugin 1.27.0 1.36.4
@sentry/vite-plugin 5.1.1 5.3.0
@vitest/coverage-v8 4.1.0 4.1.6
@vitest/ui 4.1.0 4.1.6
jsdom 29.0.0 29.1.1
oxfmt 0.45.0 0.49.0
oxlint 1.60.0 1.64.0
oxlint-tsgolint 0.21.0 0.22.1
vite-plugin-compression2 2.5.0 2.5.3
vite-plugin-pwa 1.2.0 1.3.0
vitest 4.1.0 4.1.6
wrangler 4.72.0 4.90.1

Updates @arborium/arborium from 2.16.0 to 2.17.0

Commits
  • 38ec0d3 Fix integration audit findings
  • 49bde0d Use pnpm build policy for esbuild
  • 29fd120 feat: detect: add 'bat' alias to batch
  • 999d57e feat: iife: add special 'none' theme that skips css injection
  • ea49cf8 feat: loader: pass version to resolveJs and resolveWasm
  • 408705a add evergarden theme
  • See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop from 1.7.9 to 1.8.1

Commits

Updates @sentry/react from 10.43.0 to 10.53.0

Release notes

Sourced from @​sentry/react's releases.

10.53.0

Important Changes

  • feat(core): Add streamGenAiSpans options to stream gen_ai spans (#20785)

    Adds a new streamGenAiSpans option that controls how gen_ai spans are sent to Sentry. When set, the SDK extracts all gen_ai spans out of a transaction and sends them as v2 envelope items.

    Enable this option if gen_ai spans are being dropped because the transaction payload exceeds size limits.

    Sentry.init({
  dsn: 'https://examplePublicKey@o0.ingest.sentry.io/0',
  streamGenAiSpans: true,
});

Other Changes

  • feat(browser): Migrate browser profiling thread data to span attributes (#20800)
  • feat(core): Add addConsoleInstrumentationFilter utility (#20790)
  • feat(core): Add applicationKey to BuildTimeOptionsBase (#20789)
  • feat(core): split exports by browser/server for bundle size (#20435)
  • feat(nextjs): Add top-level applicationKey option (#20794)
  • feat(node): Support Node 26 (#20710)
  • feat(profiling-node): Bump @sentry-internal/node-cpu-profiler to 2.4.0 (#20720)
  • fix(cloudflare): avoid flush lock self-wait (#20719)
  • fix(hono): Capture transaction name on request for correct culprit (#20801)
  • fix(mcp): retroactively wrap handlers registered before wrapMcpServerWithSentry (#20699)
  • fix(node-core): Guard against undefined util.getSystemErrorMap (#20660)
  • fix(replay): Capture aborted/errored fetch requests in replay network tab (#20722)
  • chore: bump replay dependencies (#20746)
  • chore: Typo intergation -> integration (#20799)
  • chore(deps): Bump @​babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.4 (#20773)
  • chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#20818)
  • chore(deps): Bump next from 16.2.4 to 16.2.6 in /dev-packages/e2e-tests/test-applications/nextjs-16-streaming (#20811)
  • chore(deps): Bump rollup from 4.59.0 to 4.60.3 (#20716)
  • ci: Ensure PR reminder workflow considers new sub teams (#20814)
  • ci: Remove codecov reporting (#20803)
  • feat(deps): Bump bundler plugins to 5.3.0 (#20820)
  • feat(deps): Bump fast-uri from 3.0.6 to 3.1.2 (#20774)
  • feat(deps): Bump hono from 4.12.16 to 4.12.18 (#20777)
  • test(cloudflare-hono): fix 'occured' -> 'occurred' typo in error log (#20783)
  • test(deps): Bump hono from 4.12.14 to 4.12.16 (#20712)
  • test(deps): Bump hono from 4.12.14 to 4.12.18 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#20776)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.53.0

Important Changes

  • feat(core): Add streamGenAiSpans options to stream gen_ai spans (#20785)

    Adds a new streamGenAiSpans option that controls how gen_ai spans are sent to Sentry. When set, the SDK extracts all gen_ai spans out of a transaction and sends them as v2 envelope items.

    Enable this option if gen_ai spans are being dropped because the transaction payload exceeds size limits.

    Sentry.init({
  dsn: 'https://examplePublicKey@o0.ingest.sentry.io/0',
  streamGenAiSpans: true,
});

Other Changes

  • feat(browser): Migrate browser profiling thread data to span attributes (#20800)
  • feat(core): Add addConsoleInstrumentationFilter utility (#20790)
  • feat(core): Add applicationKey to BuildTimeOptionsBase (#20789)
  • feat(core): split exports by browser/server for bundle size (#20435)
  • feat(nextjs): Add top-level applicationKey option (#20794)
  • feat(node): Support Node 26 (#20710)
  • feat(profiling-node): Bump @sentry-internal/node-cpu-profiler to 2.4.0 (#20720)
  • fix(cloudflare): avoid flush lock self-wait (#20719)
  • fix(hono): Capture transaction name on request for correct culprit (#20801)
  • fix(mcp): retroactively wrap handlers registered before wrapMcpServerWithSentry (#20699)
  • fix(node-core): Guard against undefined util.getSystemErrorMap (#20660)
  • fix(replay): Capture aborted/errored fetch requests in replay network tab (#20722)
  • chore: bump replay dependencies (#20746)
  • chore: Typo intergation -> integration (#20799)
  • chore(deps): Bump @​babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.4 (#20773)
  • chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#20818)
  • chore(deps): Bump next from 16.2.4 to 16.2.6 in /dev-packages/e2e-tests/test-applications/nextjs-16-streaming (#20811)
  • chore(deps): Bump rollup from 4.59.0 to 4.60.3 (#20716)
  • ci: Ensure PR reminder workflow considers new sub teams (#20814)
  • ci: Remove codecov reporting (#20803)
  • feat(deps): Bump bundler plugins to 5.3.0 (#20820)
  • feat(deps): Bump fast-uri from 3.0.6 to 3.1.2 (#20774)
  • feat(deps): Bump hono from 4.12.16 to 4.12.18 (#20777)
  • test(cloudflare-hono): fix 'occured' -> 'occurred' typo in error log (#20783)
  • test(deps): Bump hono from 4.12.14 to 4.12.16 (#20712)

... (truncated)

Commits
  • 05489b8 release: 10.53.0
  • 2e95132 Merge pull request #20822 from getsentry/prepare-release/10.53.0
  • e01d66c meta(changelog): Update changelog for 10.53.0
  • a93d32f feat(deps): Bump bundler plugins to 5.3.0 (#20820)
  • 9f99463 feat(browser): Migrate browser profiling thread data to span attributes (#20800)
  • 0411061 chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/tes...
  • ca96884 chore(deps): Bump @​babel/plugin-transform-modules-systemjs from 7.24.1 to 7.2...
  • e932256 feat(deps): Bump fast-uri from 3.0.6 to 3.1.2 (#20774)
  • ebec4e9 test(deps): Bump hono from 4.12.14 to 4.12.18 in /dev-packages/e2e-tests/test...
  • 6be4955 chore(deps): Bump next from 16.2.4 to 16.2.6 in /dev-packages/e2e-tests/test-...
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.90.21 to 5.100.10

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.100.9

Patch Changes

  • Updated dependencies [3d21cac]:
    • @​tanstack/query-devtools@​5.100.9
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query-next-experimental@​5.100.9

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query-persist-client@​5.100.9

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.100.9
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query@​5.100.9

Patch Changes

  • Updated dependencies [fcee7bd]:
    • @​tanstack/query-core@​5.100.9

@​tanstack/react-query-devtools@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.8
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query-next-experimental@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query-persist-client@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.100.8
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query@​5.100.8

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.100.10

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.10

5.100.9

Patch Changes

  • Updated dependencies [fcee7bd]:
    • @​tanstack/query-core@​5.100.9

5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.8

5.100.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.7

5.100.6

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.6

5.100.5

Patch Changes

  • Updated dependencies [a53ef97]:
    • @​tanstack/query-core@​5.100.5

5.100.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.4

5.100.3

... (truncated)

Commits

Updates @tanstack/react-query-devtools from 5.91.3 to 5.100.10

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.100.9

Patch Changes

  • Updated dependencies [3d21cac]:
    • @​tanstack/query-devtools@​5.100.9
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query-devtools@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.8
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query-devtools@​5.100.7

Patch Changes

  • docs(devtools): align logo, panel, and 'buttonPosition' union descriptions across docs and JSDoc (#10617)

  • Updated dependencies []:

    • @​tanstack/query-devtools@​5.100.7
    • @​tanstack/react-query@​5.100.7
Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.100.10

Patch Changes

  • Updated dependencies [4d130b9]:
    • @​tanstack/query-devtools@​5.100.10
    • @​tanstack/react-query@​5.100.10

5.100.9

Patch Changes

  • Updated dependencies [3d21cac]:
    • @​tanstack/query-devtools@​5.100.9
    • @​tanstack/react-query@​5.100.9

5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.8
    • @​tanstack/react-query@​5.100.8

5.100.7

Patch Changes

  • docs(devtools): align logo, panel, and 'buttonPosition' union descriptions across docs and JSDoc (#10617)

  • Updated dependencies []:

    • @​tanstack/query-devtools@​5.100.7
    • @​tanstack/react-query@​5.100.7

5.100.6

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.6
    • @​tanstack/react-query@​5.100.6

5.100.5

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.5
    • @​tanstack/react-query@​5.100.5

... (truncated)

Commits

Updates @tanstack/react-virtual from 3.13.21 to 3.13.24

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.13.24

Patch Changes

  • Updated dependencies [97a204d]:
    • @​tanstack/virtual-core@​3.14.0

@​tanstack/react-virtual@​3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

@​tanstack/react-virtual@​3.13.22

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.13.24

Patch Changes

  • Updated dependencies [97a204d]:
    • @​tanstack/virtual-core@​3.14.0

3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

3.13.22

Patch Changes

Commits

Updates @vanilla-extract/css from 1.18.0 to 1.20.1

Release notes

Sourced from @​vanilla-extract/css's releases.

@​vanilla-extract/css@​1.20.1

Patch Changes

@​vanilla-extract/css@​1.20.0

Minor Changes

  • #1702 48a9caf Thanks @​bschlenk! - Allow :where and :is in selectors if all selectors target &

    EXAMPLE USAGE:

    const example = style({
  color: 'red',
  selectors: {
    // Valid: all selectors in the list target `example`
    ':is(h1 > &, h2 > &)': { color: 'blue' }
    // Invalid: the second selector in the list does not target `example`
    ':is(h1 > &, h2)': { color: 'blue' }
  }
});

@​vanilla-extract/css@​1.19.1

Patch Changes

  • #1558 9b1bfd0 Thanks @​andjsrk! - style: Fixed a bug where nested arrays of classnames could cause missing or malformed CSS during style composition in certain situations.

    For example, the following style composition would not generate CSS for the backgroundColor: 'orange' style, and would also generate malformed CSS:

    const styleWithNestedComposition = style([
  [style1, style2],
  { backgroundColor: 'orange' },
  [style3]
]);

@​vanilla-extract/css@​1.19.0

Minor Changes

Changelog

Sourced from @​vanilla-extract/css's changelog.

1.20.1

Patch Changes

1.20.0

Minor Changes

  • #1702 48a9caf Thanks @​bschlenk! - Allow :where and :is in selectors if all selectors target &

    EXAMPLE USAGE:

    const example = style({
  color: 'red',
  selectors: {
    // Valid: all selectors in the list target `example`
    ':is(h1 > &, h2 > &)': { color: 'blue' }
    // Invalid: the second selector in the list does not target `example`
    ':is(h1 > &, h2)': { color: 'blue' }
  }
});

1.19.1

Patch Changes

  • #1558 9b1bfd0 Thanks @​andjsrk! - style: Fixed a bug where nested arrays of classnames could cause missing or malformed CSS during style composition in certain situations.

    For example, the following style composition would not generate CSS for the backgroundColor: 'orange' style, and would also generate malformed CSS:

    const styleWithNestedComposition = style([
  [style1, style2],
  { backgroundColor: 'orange' },
  [style3]
]);

1.19.0

Minor Changes

Commits

Updates @vanilla-extract/vite-plugin from 5.1.4 to 5.2.2

Release notes

Sourced from @​vanilla-extract/vite-plugin's releases.

@​vanilla-extract/vite-plugin@​5.2.2

Patch Changes

  • Updated dependencies [1677593]:
    • @​vanilla-extract/compiler@​0.7.0

@​vanilla-extract/vite-plugin@​5.2.1

Patch Changes

  • #1701 b066d1c Thanks @​askoufis! - Reduce unnecessary HMR invalidations and fix broken HMR in Astro, Nuxt and Qwik

  • Updated dependencies [b066d1c]:

    • @​vanilla-extract/compiler@​0.6.0

@​vanilla-extract/vite-plugin@​5.2.0

Minor Changes

Patch Changes

  • Updated dependencies [e29f242]:
    • @​vanilla-extract/compiler@​0.5.0

@​vanilla-extract/vite-plugin@​5.1.5

Patch Changes

Changelog

Sourced from @​vanilla-extract/vite-plugin's changelog.

5.2.2

Patch Changes

  • Updated dependencies [1677593]:
    • @​vanilla-extract/compiler@​0.7.0

5.2.1

Patch Changes

  • #1701 b066d1c Thanks @​askoufis! - Reduce unnecessary HMR invalidations and fix broken HMR in Astro, Nuxt and Qwik

  • Updated dependencies [b066d1c]:

    • @​vanilla-extract/compiler@​0.6.0

5.2.0

Minor Changes

Patch Changes

  • Updated dependencies [e29f242]:
    • @​vanilla-extract/compiler@​0.5.0

5.1.5

Patch Changes

Commits

Updates dayjs from 1.11.19 to 1.11.20

Release notes

Sourced from dayjs's releases.

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Changelog

Sourced from dayjs's changelog.

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.


Updates dompurify from 3.3.3 to 3.4.5

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.5

  • Fixed a bypass caused by the new HTML element selectedcontent added in 3.4.4, thanks @​KabirAcharya

Note that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.

DOMPurify 3.4.4

  • Added the selectedcontent element to default allow-list, thanks @​lukewarlow
  • Added the command and commandfor attributes to default allowed-list, thanks @​lukewarlow
  • Added better template scrubbing for IN_PLACE operations, thanks @​DEMON1A
  • Added stronger checks for cross-realm windows, thanks @​DEMON1A & @​fg0x0
  • Updated demo website and made sure it uses the latest from main
  • Updated existing workflows, fuzzer, dependabot, etc., added more tests
  • Bumped several dependencies where possible

🚨 This release had been flagged as deprecated, please use DOMPurify 3.4.5 instead 🚨

DOMPurify 3.4.3

  • Fixed an issue with handling of nested Shadow DOM trees, thanks @​fishjojo1
  • Fixed the template regexes to be more robust against ReDoS attacks, thanks @​aleung27
  • Updated the node iteration code to catch more Shadow DOM related issues
  • Updated Playwright and added Node 26 to test matrix
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible

DOMPurify 3.4.2

  • Fixed an issue with URI validation on attributes allowed via ADD_ATTR callback, thanks @​nelstrom
  • Fixed an issue with source maps referring to non-existing files, thanks @​cmdcolin
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible

DOMPurify 3.4.1

  • Fixed an issue with on-handler stripping for HTML-spec-reserved custom element names (font-face, color-profile, missing-glyph, font-face-src, font-face-uri, font-face-format, font-face-name) under permissive CUSTOM_ELEMENT_HANDLING
  • Fixed a case-sensitivity gap in the annotation-xml check that allowed mixed-case variants to bypass the basic-custom-element exclusion in XHTML mode
  • Fixed SANITIZE_NAMED_PROPS repeatedly prefixing already-prefixed id and name values on subsequent sanitization
  • Fixed the IN_PLACE root-node check to explicitly guard against non-string nodeName (DOM-clobbering robustness)
  • Removed a duplicate slot entry from the default HTML attribute allow-list
  • Strengthened the fast-check fuzz harness with explicit XSS invariants, an expanded seed-payload corpus, an additional idempotence property for SANITIZE_NAMED_PROPS, and a negative-control assertion ensuring the invariants actually fire
  • Added regression and pinning tests covering the above fixes and two accepted-behavior contracts (SAFE_FOR_TEMPLATES greedy scrub, hook-added attribute handling)
  • Extended CodeQL analysis to run on 3.x and 2.x maintenance branches

DOMPurify 3.4.0

Most relevant changes:

  • Fixed a problem with FORBID_TAGS not winning over ADD_TAGS, thanks @​kodareef5
  • Fixed several minor problems and typos regarding MathML attributes, thanks @​DavidOliver
  • Fixed ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls, thanks @​1Jesper1
  • Fixed a missing SAFE_FOR_TEMPLATES scrub in RETURN_DOM path, thanks @​bencalif
  • Fixed a prototype pollution via CUSTOM_ELEMENT_HANDLING, thanks @​trace37labs
  • Fixed an issue with ADD_TAGS function form bypassing FORBID_TAGS, thanks @​eddieran
  • Fixed an issue with ADD_ATTR predicates skipping URI validation, thanks @​christos-eth

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates framer-motion from 12.34.3 to 12.38.0

Changelog

Sourced from framer-motion's changelog.

[12.38.0] 2026-03-16

Added

  • Added layoutAnchor prop to configure custom anchor point for resolving relative projection boxes.

Fixed

  • Reorder: Fix axis switching after window resize.
  • Reorder: Fix with virtualised lists.
  • AnimatePresence: Ensure children are removed when exit animation matches current values.

[12.37.0] 2026-03-16

Added

  • Support for hardware accelerating "start" and "end" offsets in scroll and useScroll.
  • Support for oklch, oklab, lab, lch, color, color-mix, light-dark color types.

Fixed

  • Fix whileInView with client-side navigation.
  • Fix draggable elements when layout updates due to surrounding element re-renders.
  • Improved memory pressure of layout animations.
  • Ensure motion value returned from useSpring reports correct isAnimating().

[12.36.0] 2026-03-09

Added

  • Allow dragSnapToOrigin to accept "x" or "y" for per-axis snapping.
  • Added axis-locked layout animations with layout="x" and layout="y".
  • Added skipInitialAnimation to useSpring.

Fixed

  • Fixed height and width: auto animations with box-sizing: border-box.
  • Reset component values when exit animation finishes.
  • Ensure anticipate easing returns 1 at p === 1.
  • Fix @emotion/is-prop-valid resolve error in Storybook.
  • Remove data-pop-layout-id from exiting elements when animation interrupted.
  • Ensure we skip WAAPI for non-animatable keyframes.
  • Ensure we skip WAAPI for SVG transforms.
  • Ensure MotionValue props are not passed to SVG.
  • AnimatePresence: Prevent mode="wait" elements from getting stuck when switched rapidly.

[12.35.2] 2026-03-09

Fixed

... (truncated)

Commits

@dependabot dependabot Bot added the internal label May 18, 2026
@dependabot dependabot Bot requested review from 7w1 and hazre as code owners May 18, 2026 02:07
@dependabot dependabot Bot added the internal label May 18, 2026
@dependabot
chore: bump the npm-non-major group across 1 directory with 35 updates
03059c4 
Bumps the npm-non-major group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@arborium/arborium](https://github.com/bearcove/arborium/tree/HEAD/packages/arborium) | `2.16.0` | `2.17.0` |
| [@atlaskit/pragmatic-drag-and-drop](https://github.com/atlassian/pragmatic-drag-and-drop) | `1.7.9` | `1.8.1` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.43.0` | `10.53.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.100.10` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.91.3` | `5.100.10` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.21` | `3.13.24` |
| [@vanilla-extract/css](https://github.com/vanilla-extract-css/vanilla-extract/tree/HEAD/packages/css) | `1.18.0` | `1.20.1` |
| [@vanilla-extract/vite-plugin](https://github.com/vanilla-extract-css/vanilla-extract/tree/HEAD/packages/vite-plugin) | `5.1.4` | `5.2.2` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.19` | `1.11.20` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.34.3` | `12.38.0` |
| [jotai](https://github.com/pmndrs/jotai) | `2.18.1` | `2.20.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.2` | `18.0.3` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `5.5.207` | `5.7.284` |
| [react-aria](https://github.com/adobe/react-spectrum) | `3.47.0` | `3.48.0` |
| [react-colorful](https://github.com/omgovich/react-colorful) | `5.6.1` | `5.7.0` |
| [slate](https://github.com/ianstormtaylor/slate) | `0.123.0` | `0.124.1` |
| [slate-dom](https://github.com/ianstormtaylor/slate) | `0.123.0` | `0.124.1` |
| [slate-react](https://github.com/ianstormtaylor/slate) | `0.123.0` | `0.124.0` |
| [virtua](https://github.com/inokawa/virtua) | `0.48.8` | `0.49.1` |
| [workbox-precaching](https://github.com/googlechrome/workbox) | `7.4.0` | `7.4.1` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.27.0` | `1.36.4` |
| [@sentry/vite-plugin](https://github.com/getsentry/sentry-javascript-bundler-plugins) | `5.1.1` | `5.3.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.0` | `4.1.6` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.0` | `4.1.6` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.0` | `29.1.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.45.0` | `0.49.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.60.0` | `1.64.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.21.0` | `0.22.1` |
| [vite-plugin-compression2](https://github.com/nonzzz/vite-plugin-compression) | `2.5.0` | `2.5.3` |
| [vite-plugin-pwa](https://github.com/vite-pwa/vite-plugin-pwa) | `1.2.0` | `1.3.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.6` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.72.0` | `4.90.1` |



Updates `@arborium/arborium` from 2.16.0 to 2.17.0
- [Commits](https://github.com/bearcove/arborium/commits/v2.17.0/packages/arborium)

Updates `@atlaskit/pragmatic-drag-and-drop` from 1.7.9 to 1.8.1
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

Updates `@sentry/react` from 10.43.0 to 10.53.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.43.0...10.53.0)

Updates `@tanstack/react-query` from 5.90.21 to 5.100.10
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/HEAD/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.91.3 to 5.100.10
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/HEAD/packages/react-query-devtools)

Updates `@tanstack/react-virtual` from 3.13.21 to 3.13.24
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.13.24/packages/react-virtual)

Updates `@vanilla-extract/css` from 1.18.0 to 1.20.1
- [Release notes](https://github.com/vanilla-extract-css/vanilla-extract/releases)
- [Changelog](https://github.com/vanilla-extract-css/vanilla-extract/blob/master/packages/css/CHANGELOG.md)
- [Commits](https://github.com/vanilla-extract-css/vanilla-extract/commits/@vanilla-extract/css@1.20.1/packages/css)

Updates `@vanilla-extract/vite-plugin` from 5.1.4 to 5.2.2
- [Release notes](https://github.com/vanilla-extract-css/vanilla-extract/releases)
- [Changelog](https://github.com/vanilla-extract-css/vanilla-extract/blob/master/packages/vite-plugin/CHANGELOG.md)
- [Commits](https://github.com/vanilla-extract-css/vanilla-extract/commits/@vanilla-extract/vite-plugin@5.2.2/packages/vite-plugin)

Updates `dayjs` from 1.11.19 to 1.11.20
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.19...v1.11.20)

Updates `dompurify` from 3.3.3 to 3.4.5
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.3...3.4.5)

Updates `framer-motion` from 12.34.3 to 12.38.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.34.3...v12.38.0)

Updates `i18next-http-backend` from 2.7.3 to 4.0.0
- [Changelog](https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next-http-backend@v2.7.3...v4.0.0)

Updates `jotai` from 2.18.1 to 2.20.0
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.18.1...v2.20.0)

Updates `marked` from 18.0.2 to 18.0.3
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.2...v18.0.3)

Updates `pdfjs-dist` from 5.5.207 to 5.7.284
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v5.5.207...v5.7.284)

Updates `react-aria` from 3.47.0 to 3.48.0
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/react-aria@3.47.0...react-aria@3.48.0)

Updates `react-colorful` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/omgovich/react-colorful/releases)
- [Changelog](https://github.com/omgovich/react-colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/omgovich/react-colorful/commits/5.7.0)

Updates `slate` from 0.123.0 to 0.124.1
- [Release notes](https://github.com/ianstormtaylor/slate/releases)
- [Commits](https://github.com/ianstormtaylor/slate/compare/slate@0.123.0...slate@0.124.1)

Updates `slate-dom` from 0.123.0 to 0.124.1
- [Release notes](https://github.com/ianstormtaylor/slate/releases)
- [Commits](https://github.com/ianstormtaylor/slate/compare/slate-dom@0.123.0...slate-dom@0.124.1)

Updates `slate-react` from 0.123.0 to 0.124.0
- [Release notes](https://github.com/ianstormtaylor/slate/releases)
- [Commits](https://github.com/ianstormtaylor/slate/compare/slate-react@0.123.0...slate-react@0.124.0)

Updates `virtua` from 0.48.8 to 0.49.1
- [Release notes](https://github.com/inokawa/virtua/releases)
- [Commits](inokawa/virtua@0.48.8...0.49.1)

Updates `workbox-precaching` from 7.4.0 to 7.4.1
- [Release notes](https://github.com/googlechrome/workbox/releases)
- [Commits](GoogleChrome/workbox@v7.4.0...v7.4.1)

Updates `@cloudflare/vite-plugin` from 1.27.0 to 1.36.4
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.36.4/packages/vite-plugin-cloudflare)

Updates `@sentry/vite-plugin` from 5.1.1 to 5.3.0
- [Release notes](https://github.com/getsentry/sentry-javascript-bundler-plugins/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript-bundler-plugins/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript-bundler-plugins@5.1.1...5.3.0)

Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.0 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/ui)

Updates `jsdom` from 29.0.0 to 29.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.0.0...v29.1.1)

Updates `oxfmt` from 0.45.0 to 0.49.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.49.0/npm/oxfmt)

Updates `oxlint` from 1.60.0 to 1.64.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.64.0/npm/oxlint)

Updates `oxlint-tsgolint` from 0.21.0 to 0.22.1
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v0.21.0...v0.22.1)

Updates `vite` from 7.3.1 to 8.0.13
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.13/packages/vite)

Updates `vite-plugin-compression2` from 2.5.0 to 2.5.3
- [Release notes](https://github.com/nonzzz/vite-plugin-compression/releases)
- [Changelog](https://github.com/nonzzz/vite-plugin-compression/blob/master/CHANGELOG.md)
- [Commits](nonzzz/vite-plugin-compression@v2.5.0...v2.5.3)

Updates `vite-plugin-pwa` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/vite-pwa/vite-plugin-pwa/releases)
- [Commits](vite-pwa/vite-plugin-pwa@v1.2.0...v1.3.0)

Updates `vitest` from 4.1.0 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)

Updates `wrangler` from 4.72.0 to 4.90.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.90.1/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@arborium/arborium"
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@atlaskit/pragmatic-drag-and-drop"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.36.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@sentry/react"
  dependency-version: 10.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@sentry/vite-plugin"
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.100.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.100.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.13.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: "@vanilla-extract/css"
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@vanilla-extract/vite-plugin"
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: dayjs
  dependency-version: 1.11.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: dompurify
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: framer-motion
  dependency-version: 12.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: i18next-http-backend
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-non-major
- dependency-name: jotai
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: marked
  dependency-version: 18.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: oxfmt
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: oxlint
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: oxlint-tsgolint
  dependency-version: 0.22.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: pdfjs-dist
  dependency-version: 5.7.284
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: react-aria
  dependency-version: 3.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: react-colorful
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: slate
  dependency-version: 0.124.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: slate-dom
  dependency-version: 0.124.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: slate-react
  dependency-version: 0.124.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: virtua
  dependency-version: 0.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: vite
  dependency-version: 8.0.13
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-non-major
- dependency-name: vite-plugin-compression2
  dependency-version: 2.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: vite-plugin-pwa
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: workbox-precaching
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-non-major
- dependency-name: wrangler
  dependency-version: 4.90.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-non-major-d06bca77c0 branch from bff5e12 to 03059c4 Compare May 19, 2026 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@7w1 7w1 Awaiting requested review from 7w1 7w1 is a code owner

@hazre hazre Awaiting requested review from hazre hazre is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

internal

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants