security(deps)(deps): bump the nodejs-minor-patch group in /frontend with 16 updates #6

dependabot · 2025-10-25T03:38:15Z

Bumps the nodejs-minor-patch group in /frontend with 16 updates:

Package	From	To
@tailwindcss/typography	`0.5.16`	`0.5.19`
dompurify	`3.2.6`	`3.3.0`
lucide-react	`0.525.0`	`0.548.0`
marked	`16.2.0`	`16.4.1`
react	`19.1.1`	`19.2.0`
@types/react	`19.1.10`	`19.2.2`
react-dom	`19.1.1`	`19.2.0`
@types/react-dom	`19.1.7`	`19.2.2`
react-router-dom	`7.8.1`	`7.9.4`
@eslint/js	`9.33.0`	`9.38.0`
@testing-library/jest-dom	`6.7.0`	`6.9.1`
eslint	`9.33.0`	`9.38.0`
eslint-plugin-react-refresh	`0.4.20`	`0.4.24`
globals	`16.3.0`	`16.4.0`
tailwindcss	`3.4.17`	`3.4.18`
vite	`7.1.3`	`7.1.12`

Updates @tailwindcss/typography from 0.5.16 to 0.5.19

Release notes

Sourced from @tailwindcss/typography's releases.

v0.5.19

Fixed

Fixed broken color styles (#405)

v0.5.18

Fixed

Fixed undefined variable error (#403)

v0.5.17

Added

Add modifiers for description list elements (#357)

Add prose-picture modifier (#367)

Fixed

Include unit in hr border-width value (#379)

Ensure <kbd> styles work with Tailwind CSS v4 (#387)

Changed

Remove lodash dependencies (#402)

Changelog

Sourced from @tailwindcss/typography's changelog.

[0.5.19] - 2025-09-24

Fixed

Fixed broken color styles (#405)

[0.5.18] - 2025-09-19

Fixed

Fixed undefined variable error (#403)

[0.5.17] - 2025-09-19

Added

Add modifiers for description list elements (#357)

Add prose-picture modifier (#367)

Fixed

Include unit in hr border-width value (#379)

Ensure <kbd> styles work with Tailwind CSS v4 (#387)

Changed

Remove lodash dependencies (#402)

Commits

e002ab8 0.5.19
bbb1c21 Fix bad RGB syntax (#405)
b316f95 0.5.18
ed95206 Fix variable declaration in opacity function (#403)
7efcb4a 0.5.17
e0ec248 chore(ci): update actions for release insiders
511afcb Add modifiers for description list elements (#357)
042a531 Add prose-picture modifiers (#367)
f822222 Fix kbd shadow colors not being calculated on oklch colors (#387)
ecb7e87 Add Tailwind v4 custom color theme example to README (#396)
Additional commits viewable in compare view

Updates dompurify from 3.2.6 to 3.3.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.0

Added the SVG mask-type attribute to default allow-list, thanks @prasadrajandran

Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @nelstrom

Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks @Wim-Valgaeren

DOMPurify 3.2.7

Added new attributes and elements to default allow-list, thanks @elrion018

Added tagName parameter to custom element attributeNameCheck, thanks @nelstrom

Added better check for animated href attributes, thanks @llamakko

Updated and improved the bundled types, thanks @ssi02014

Updated several tests to better align with new browser encoding behaviors

Improved the handling of potentially risky content inside CDATA elements, thanks @securityMB & @terjanq

Improved the regular expression for raw-text elements to cover textareas, thanks @securityMB & @terjanq

Commits

36d1fbc Getting 3.x branch ready for 3.3.0 release (#1157)
eaa0bdb Merge pull request #1144 from cure53/main
f712593 fix: removed a possibly dossy regex
eb9b3b6 Merge branch 'main' of github.com:cure53/DOMPurify
ce006f7 chore: Preparing 3.2.7 release
ef0e0cb chore: Preparing 3.2.6 release
2f09cd3 Update README.md
6a795bc Merge pull request #1142 from cure53/dependabot/github_actions/actions/setup-...
2458bbd build(deps): bump actions/setup-node from 4 to 5
e43d3f3 Merge pull request #1136 from cure53/dependabot/github_actions/actions/checko...
Additional commits viewable in compare view

Updates lucide-react from 0.525.0 to 0.548.0

Release notes

Sourced from lucide-react's releases.

Version 0.548.0

What's Changed

feat(docs): add new package for Slint by @cnlancehu in lucide-icons/lucide#3698

docs(site): add introductions for packages in documentation by @mattheskaiser in lucide-icons/lucide#3643

Fix default prop by @ericfennis in lucide-icons/lucide#3730

feat(icons): added gamepad-directional icon by @felipeajzanetti in lucide-icons/lucide#3693

New Contributors

@cnlancehu made their first contribution in lucide-icons/lucide#3698

@mattheskaiser made their first contribution in lucide-icons/lucide#3643

@felipeajzanetti made their first contribution in lucide-icons/lucide#3693

Full Changelog: lucide-icons/lucide@0.547.0...0.548.0

Version 0.547.0

What's Changed

fix(docs): update brand logo statement link in github action by @karsa-mistmere in lucide-icons/lucide#3630

chore(deps): bump astro from 5.5.2 to 5.14.4 by @dependabot[bot] in lucide-icons/lucide#3683

fix(packages/lucide): replace elements inside \<template> (#2635) by @KhalidAlansary in lucide-icons/lucide#3576

feat(icons): added birdhouse icon by @hieu-onefold in lucide-icons/lucide#3378

New Contributors

@KhalidAlansary made their first contribution in lucide-icons/lucide#3576

@hieu-onefold made their first contribution in lucide-icons/lucide#3378

Full Changelog: lucide-icons/lucide@0.546.0...0.547.0

Version 0.546.0

What's Changed

fix(icons): changed receipt-text icon by @jguddas in lucide-icons/lucide#3553

fix(docs): removed duplicate text in intro text by @nielsswinkels in lucide-icons/lucide#3673

feat(icons): add VS Code squircle base shape snippet by @danielbayley in lucide-icons/lucide#3674

fix(icons): changed sword icon by @jguddas in lucide-icons/lucide#3421

feat(icons): added monitor-cloud icon by @karsa-mistmere in lucide-icons/lucide#3037

New Contributors

@nielsswinkels made their first contribution in lucide-icons/lucide#3673

Full Changelog: lucide-icons/lucide@0.545.0...0.546.0

Version 0.545.0

What's Changed

fix(icons): changed flame icon by @jamiemlaw in lucide-icons/lucide#3600

fix(icons): arcified square-m icon by @jguddas in lucide-icons/lucide#3549

chore(deps-dev): bump vite from 6.3.5 to 6.3.6 by @dependabot[bot] in lucide-icons/lucide#3611

fix(icons): changed combine icon by @jguddas in lucide-icons/lucide#3200

fix(icons): changed building-2 icon by @karsa-mistmere in lucide-icons/lucide#3509

chore(deps): bump devalue from 5.1.1 to 5.3.2 by @dependabot[bot] in lucide-icons/lucide#3638

feat(icons): Add motorbike icon by @jamiemlaw in lucide-icons/lucide#3371

... (truncated)

Commits

1cfb3ff chore(deps-dev): bump vite from 6.3.5 to 6.3.6 (#3611)
e71198d chore: icon alias improvements (#2861)
See full diff in compare view

Updates marked from 16.2.0 to 16.4.1

Release notes

Sourced from marked's releases.

v16.4.1

16.4.1 (2025-10-17)

Bug Fixes

resolve even-numbered backtick precedence issue (#3776) (#3786) (1da8fb5)

v16.4.0

16.4.0 (2025-10-07)

Bug Fixes

Fix backtick and code rendering in links (#3783) (302ee59)

fix links with square brackets in inline code break wrapping italics (#3785) (e3c0d3e)

Make www case-sensitive when detecting link starts (#3770) (626d961)

Features

Add async provideParser provideLexer (#3756) (09577e5)

v16.3.0

16.3.0 (2025-09-14)

Features

add emStrongMask hook (#3749) (cd2b5f4)

v16.2.1

16.2.1 (2025-08-27)

Bug Fixes

allow escaped newline in link text (#3752) (30c6630)

Commits

7b1842b chore(release): 16.4.1 [skip ci]
f9fa5bb chore: clean up blockskip (#3801)
1da8fb5 fix: resolve even-numbered backtick precedence issue (#3776) (#3786)
28528ff docs: Add dark mode (#3794)
091d5f9 docs: fix small typo in README (Checkout → Check out) (#3800)
3cadbbf chore(release): 16.4.0 [skip ci]
7b4c520 chore: clean up rules (#3791)
09577e5 feat: Add async provideParser provideLexer (#3756)
626d961 fix: Make www case-sensitive when detecting link starts (#3770)
e3c0d3e fix: fix links with square brackets in inline code break wrapping italics (#3...
Additional commits viewable in compare view

Updates react from 19.1.1 to 19.2.0

Release notes

Sourced from react's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

React DOM

Block on Suspensey Fonts during reveal of server-side-rendered content (@sebmarkbage #33342)

Use underscore instead of : for IDs generated by useId (@sebmarkbage, @eps1lon: #32001, facebook/react#33342 #33099, #33422)

Stop warning when ARIA 1.3 attributes are used (@Abdul-Omira #34264)

Allow nonce to be used on hoistable styles (@Andarist #32461)

Warn for using a React owned node as a Container if it also has text content (@sebmarkbage #32774)

... (truncated)

Changelog

Sourced from react's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

React DOM

Block on Suspensey Fonts during reveal of server-side-rendered content (@sebmarkbage #33342)

Use underscore instead of : for IDs generated by useId (@sebmarkbage, @eps1lon: #32001, facebook/react#33342 #33099, #33422)

Stop warning when ARIA 1.3 attributes are used (@Abdul-Omira #34264)

Allow nonce to be used on hoistable styles (@Andarist #32461)

... (truncated)

Commits

5667a41 Bump next prerelease version numbers (#34639)
8bb7241 Bump useEffectEvent to Canary (#34610)
e3c9656 Ensure Performance Track are Clamped and Don't overlap (#34509)
68f00c9 Release Activity in Canary (#34374)
0e10ee9 [Reconciler] Set ProfileMode for Host Root Fiber by default in dev (#34432)
3bf8ab4 Add missing Activity export to development mode (#34439)
1549bda [Flight] Only assign _store in dev mode when creating lazy types (#34354)
bb6f0c8 [Flight] Fix wrong missing key warning when static child is blocked (#34350)
05addfc Update Flow to 0.266 (#34271)
ec5dd0a Update Flow to 0.257 (#34253)
Additional commits viewable in compare view

Updates @types/react from 19.1.10 to 19.2.2

Commits

See full diff in compare view

Updates react-dom from 19.1.1 to 19.2.0

Release notes

Sourced from react-dom's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

React DOM

Block on Suspensey Fonts during reveal of server-side-rendered content (@sebmarkbage #33342)

Use underscore instead of : for IDs generated by useId (@sebmarkbage, @eps1lon: #32001, facebook/react#33342 #33099, #33422)

Stop warning when ARIA 1.3 attributes are used (@Abdul-Omira #34264)

Allow nonce to be used on hoistable styles (@Andarist #32461)

Warn for using a React owned node as a Container if it also has text content (@sebmarkbage #32774)

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

React DOM

Block on Suspensey Fonts during reveal of server-side-rendered content (@sebmarkbage #33342)

Use underscore instead of : for IDs generated by useId (@sebmarkbage, @eps1lon: #32001, facebook/react#33342 #33099, #33422)

Stop warning when ARIA 1.3 attributes are used (@Abdul-Omira #34264)

Allow nonce to be used on hoistable styles (@Andarist #32461)

... (truncated)

Commits

8618113 Bump scheduler version (#34671)
1bd1f01 Ship partial-prerendering APIs to Canary (#34633)
2f0649a [Fizz] Remove nonce option from resume-and-prerender APIs (#34664)
5667a41 Bump next prerelease version numbers (#34639)
e08f53b Match react-dom/static test entrypoints and published entrypoints (#34599)
8bb7241 Bump useEffectEvent to Canary (#34610)
83c88ad Handle fabric root level fragment with compareDocumentPosition (#34533)
68f00c9 Release Activity in Canary (#34374)
3168e08 [flags] enable opt-in for enableDefaultTransitionIndicator (#34373)
3434ff4 Add scrollIntoView to fragment instances (#32814)
Additional commits viewable in compare view

Updates @types/react-dom from 19.1.7 to 19.2.2

Commits

See full diff in compare view

Updates react-router-dom from 7.8.1 to 7.9.4

Release notes

Sourced from react-router-dom's releases.

[email protected]

Patch Changes

Updated dependencies

[email protected]

[email protected]

[email protected]

Patch Changes

Updated dependencies

[email protected]

[email protected]

Changelog

Sourced from react-router-dom's changelog.

7.9.4

Patch Changes

Updated dependencies:

[email protected]

7.9.3

Patch Changes

Updated dependencies:

[email protected]

7.9.2

Patch Changes

Updated dependencies:

[email protected]

7.9.1

Patch Changes

Updated dependencies:

[email protected]

7.9.0

Patch Changes

Updated dependencies:

[email protected]

7.8.2

Patch Changes

Updated dependencies:

[email protected]

Commits

e650acf chore: Update version for release (#14431)
7a2271e chore: Update version for release (pre) (#14427)
12a6719 chore: Update version for release (#14395)
b6c49ec chore: Update version for release (pre) (#14394)
8d7ed4d chore: Update version for release (#14386)
a369632 chore: Update version for release (pre) (#14384)
f2298c3 chore: Update version for release (pre) (#14375)
7862d37 chore: Update version for release (pre) (#14366)
15a0041 chore: Update version for release (pre) (#14364)
4a9a2a3 chore: Update version for release (#14330)
Additional commits viewable in compare view

Updates @eslint/js from 9.33.0 to 9.38.0

Release notes

Sourced from @eslint/js's releases.

v9.38.0

Features

ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)

e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)

a1f06a3 fix: correct SourceCode typings (#20114) (Pixel998)

Documentation

462675a docs: improve web accessibility by hiding non-semantic character (#20205) (루밀LuMir)

c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#20203) (루밀LuMir)

Bumps the nodejs-minor-patch group in /frontend with 16 updates: | Package | From | To | | --- | --- | --- | | [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.16` | `0.5.19` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.2.6` | `3.3.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.525.0` | `0.548.0` | | [marked](https://github.com/markedjs/marked) | `16.2.0` | `16.4.1` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.1.1` | `19.2.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.10` | `19.2.2` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.1.1` | `19.2.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.7` | `19.2.2` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.8.1` | `7.9.4` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.33.0` | `9.38.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.7.0` | `6.9.1` | | [eslint](https://github.com/eslint/eslint) | `9.33.0` | `9.38.0` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.20` | `0.4.24` | | [globals](https://github.com/sindresorhus/globals) | `16.3.0` | `16.4.0` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.17` | `3.4.18` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.3` | `7.1.12` | Updates `@tailwindcss/typography` from 0.5.16 to 0.5.19 - [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss-typography@v0.5.16...v0.5.19) Updates `dompurify` from 3.2.6 to 3.3.0 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.2.6...3.3.0) Updates `lucide-react` from 0.525.0 to 0.548.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.548.0/packages/lucide-react) Updates `marked` from 16.2.0 to 16.4.1 - [Release notes](https://github.com/markedjs/marked/releases) - [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json) - [Commits](markedjs/marked@v16.2.0...v16.4.1) Updates `react` from 19.1.1 to 19.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react) Updates `@types/react` from 19.1.10 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.1.1 to 19.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react-dom) Updates `@types/react-dom` from 19.1.7 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-router-dom` from 7.8.1 to 7.9.4 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom) Updates `@eslint/js` from 9.33.0 to 9.38.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.38.0/packages/js) Updates `@testing-library/jest-dom` from 6.7.0 to 6.9.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.7.0...v6.9.1) Updates `@types/react` from 19.1.10 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.1.7 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `eslint` from 9.33.0 to 9.38.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.33.0...v9.38.0) Updates `eslint-plugin-react-refresh` from 0.4.20 to 0.4.24 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.20...v0.4.24) Updates `globals` from 16.3.0 to 16.4.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.3.0...v16.4.0) Updates `tailwindcss` from 3.4.17 to 3.4.18 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v3.4.18/packages/tailwindcss) Updates `vite` from 7.1.3 to 7.1.12 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.1.12/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.12/packages/vite) --- updated-dependencies: - dependency-name: "@tailwindcss/typography" dependency-version: 0.5.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nodejs-minor-patch - dependency-name: dompurify dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: lucide-react dependency-version: 0.548.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: marked dependency-version: 16.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: react dependency-version: 19.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@types/react" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: react-dom dependency-version: 19.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: react-router-dom dependency-version: 7.9.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@eslint/js" dependency-version: 9.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@testing-library/jest-dom" dependency-version: 6.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@types/react" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: eslint dependency-version: 9.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.4.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs-minor-patch - dependency-name: globals dependency-version: 16.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-minor-patch - dependency-name: tailwindcss dependency-version: 3.4.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs-minor-patch - dependency-name: vite dependency-version: 7.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs-minor-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-25T03:38:16Z

Assignees

The following users could not be added as assignees: security-team. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, javascript, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

garland3 merged commit 640d035 into main Oct 25, 2025
5 of 8 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/frontend/nodejs-minor-patch-2d78fee449 branch October 25, 2025 04:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

security(deps)(deps): bump the nodejs-minor-patch group in /frontend with 16 updates #6

security(deps)(deps): bump the nodejs-minor-patch group in /frontend with 16 updates #6

Uh oh!

dependabot bot commented on behalf of github Oct 25, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 25, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

security(deps)(deps): bump the nodejs-minor-patch group in /frontend with 16 updates #6

security(deps)(deps): bump the nodejs-minor-patch group in /frontend with 16 updates #6

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 25, 2025

v0.5.19

Fixed

v0.5.18

Fixed

v0.5.17

Added

Fixed

Changed

[0.5.19] - 2025-09-24

Fixed

[0.5.18] - 2025-09-19

Fixed

[0.5.17] - 2025-09-19

Added

Fixed

Changed

DOMPurify 3.3.0

DOMPurify 3.2.7

Version 0.548.0

What's Changed

New Contributors

Version 0.547.0

What's Changed

New Contributors

Version 0.546.0

What's Changed

New Contributors

Version 0.545.0

What's Changed

v16.4.1

16.4.1 (2025-10-17)

Bug Fixes

v16.4.0

16.4.0 (2025-10-07)

Bug Fixes

Features

v16.3.0

16.3.0 (2025-09-14)

Features

v16.2.1

16.2.1 (2025-08-27)

Bug Fixes

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

React DOM

19.2.0 (October 1st, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

React DOM

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

React DOM

19.2.0 (October 1st, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

React DOM

[email protected]

Patch Changes

[email protected]

Patch Changes

7.9.4