chore(deps): bump the minor group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1644 · DiamondLightSource/workflows

dependabot · 2026-09-23T12:37:29Z

Bumps the minor group with 5 updates in the /frontend directory:

Package	From	To
graphql	`17.0.0`	`17.0.2`
keycloak-js	`26.2.1`	`26.2.4`
postcss	`8.4.0`	`8.5.28`
react-icons	`5.3.0`	`5.7.0`
vitest	`5.0.0`	`5.0.1`

Updates graphql from 17.0.0 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

#4832 fix: detect default-value changes on input object fields (@spokodev)

Polish 💅

#4829 fix(mapSchemaConfig): fix context for schema argument mapper (@yaacovCR)

Committers: 2

null(@spokodev)

Yaacov Rydzinski (@yaacovCR)

v17.0.1 (2026-06-16)

Bug Fix 🐞

#4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@logaretm)

Internal 🏠

#4823 chore(npm): remove obsolete ESM-only package build (@yaacovCR)

#4825 chore(release): protect latest release channels (@yaacovCR)

Committers: 2

Abdelrahman Awad(@logaretm)

Yaacov Rydzinski (@yaacovCR)

Commits

71606d7 chore(release): v17.0.2
101de34 fix: detect default-value changes on input object fields (#4832)
82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
9617473 chore(release): v17.0.1
851bd6a chore(release): protect latest release channels (#4825)
c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
See full diff in compare view

Updates keycloak-js from 26.2.1 to 26.2.4

Release notes

Sourced from keycloak-js's releases.

26.2.4

26.2.3

... (truncated)

Commits

dabf89c Set version to 26.2.4
7abc00c Add release notes for 26.2.4 (#298)
7c1d5ed Close in-app browser before awaiting token exchange in Cordova adapter (#285)
c4c4d8f Bump @keycloak/keycloak-admin-client from 26.5.7 to 26.6.1 (#296)
59ab675 Bump @types/node from 25.5.2 to 25.6.0 (#295)
0541a72 Bump @types/node from 25.5.0 to 25.5.2 (#292)
8a842d3 Bump @keycloak/keycloak-admin-client from 26.5.6 to 26.5.7 (#291)
569b021 Bump @playwright/test from 1.58.2 to 1.59.1 (#290)
94a3fb7 Bump @keycloak/keycloak-admin-client from 26.5.5 to 26.5.6 (#286)
2f98347 Bump @types/node from 25.4.0 to 25.5.0 (#284)
Additional commits viewable in compare view

Updates postcss from 8.4.0 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

... (truncated)

Commits

e544bff Release 8.5.28 version
f8fc252 Typo
5039fd7 Add missed release notes
ae40ca4 Release 8.5.27 version
62b1626 Fix linter
1dba938 Update dependencies
3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
6d23bc3 Fix link
508e997 Add GitHub Sponsors link
e993739 Add CodeRabbit sponsor (#2145)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates react-icons from 5.3.0 to 5.7.0

Release notes

Sourced from react-icons's releases.

v5.7.0

What's Changed

update packages by @kamijin-fanta in react-icons/react-icons#1153

Full Changelog: react-icons/react-icons@v5.6.0...v5.7.0

Icon Library License Version Count

Circum Icons MPL-2.0 license 1.0.0 288

Font Awesome 5 CC BY 4.0 License 5.15.4-3-gafecf2a 1612

Font Awesome 6 CC BY 4.0 License 6.7.2-1-g840c215 2060

Ionicons 4 MIT 4.6.3 696

Ionicons 5 MIT 5.5.4 1332

Material Design icons Apache License Version 2.0 4.0.0-161-gf3fb4442b2 4341

Typicons CC BY-SA 3.0 2.1.2 336

Github Octicons icons MIT 18.3.0 264

Feather MIT 4.29.2 287

Lucide ISC 0.462.0 1541

Game Icons CC BY 3.0 12920d6565588f0512542a3cb0cdfd36a497f910 4040

Weather Icons SIL OFL 1.1 2.0.12 219

Devicons MIT 1.8.0 192

Ant Design Icons MIT 4.4.2 831

Bootstrap Icons MIT 1.13.1 2754

Remix Icon Apache License Version 2.0 4.9.1 3229

Flat Color Icons MIT 1.0.2 329

Grommet-Icons Apache License Version 2.0 4.14.0 637

Heroicons MIT 1.0.6 460

Heroicons 2 MIT 2.2.0 972

Simple Icons CC0 1.0 Universal 16.24.0 3446

Simple Line Icons MIT 2.5.5 189

IcoMoon Free CC BY 4.0 License d006795ede82361e1bac1ee76f215cf1dc51e4ca 491

BoxIcons MIT 2.1.4 1634

css.gg MIT 2.1.4 704

VS Code Icons CC BY 4.0 0.0.0 612

Tabler Icons MIT 3.44.0 6146

Themify Icons MIT v0.1.2-2-g9600186 352

Radix Icons MIT @radix-ui/react-icons@1.3.2-35-g112af91 332

Phosphor Icons MIT 2.1.1 9072

Icons8 Line Awesome MIT 1.3.1 1544

v5.6.0

What's Changed

Bump prismjs from 1.29.0 to 1.30.0 by @dependabot[bot] in react-icons/react-icons#1033

Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot[bot] in react-icons/react-icons#1036

Bump http-proxy-middleware from 2.0.7 to 2.0.9 by @dependabot[bot] in react-icons/react-icons#1041

Bump form-data from 3.0.1 to 3.0.4 by @dependabot[bot] in react-icons/react-icons#1058

Bump vite from 5.4.14 to 5.4.20 by @dependabot[bot] in react-icons/react-icons#1071

upgrade packages by @kamijin-fanta in react-icons/react-icons#1075

Bump tar from 6.2.0 to 6.2.1 by @dependabot[bot] in react-icons/react-icons#1078

... (truncated)

Commits

87470d5 v5.7.0
e1cb061 fix ci publish
bffaab7 Revert "v5.7.0"
2cde989 v5.7.0
dac95cc update npm in ci workflow
21fcd04 Revert "v5.7.0"
3a05518 v5.7.0
c8b5050 fix github pages deploy
2f78ae4 Update CI actions, Pages deploy, and staged npm publishing
11f5a06 update packages (#1153)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-icons since your current version.

Updates vitest from 5.0.0 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection - by @hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking - by @sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution - by @sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache - by @sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments - by @shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends - by @sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used - by @im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define - by @sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments - by @sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot - by @sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

types:

Make public declarations self-contained - by @ZoeySigel in vitest-dev/vitest#11141 (45546)

ui:

Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)

Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)

utils:

Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

Commits

03630a5 chore: release v5.0.1 (#11275)
a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
91ab158 fix(doctor): measure vm pools for custom environments (#11212)
23dda73 fix: share the server on self-referencing extends (#11034)
498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
115c3f6 fix: correct typos in error message and comments (#11187)
7361465 fix: keep metadata file when clearing the cache (#11199)
972e24b fix(browser): avoid double quotes in config.define (#11198)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 5 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [graphql](https://github.com/graphql/graphql-js) | `17.0.0` | `17.0.2` | | [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.1` | `26.2.4` | | [postcss](https://github.com/postcss/postcss) | `8.4.0` | `8.5.28` | | [react-icons](https://github.com/react-icons/react-icons) | `5.3.0` | `5.7.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.1` | Updates `graphql` from 17.0.0 to 17.0.2 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v17.0.0...v17.0.2) Updates `keycloak-js` from 26.2.1 to 26.2.4 - [Release notes](https://github.com/keycloak/keycloak-js/releases) - [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md) - [Commits](keycloak/keycloak-js@26.2.1...26.2.4) Updates `postcss` from 8.4.0 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.0...8.5.28) Updates `react-icons` from 5.3.0 to 5.7.0 - [Release notes](https://github.com/react-icons/react-icons/releases) - [Commits](react-icons/react-icons@v5.3.0...v5.7.0) Updates `vitest` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest) --- updated-dependencies: - dependency-name: graphql dependency-version: 17.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: keycloak-js dependency-version: 26.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: react-icons dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 23, 2026

dependabot Bot mentioned this pull request Sep 23, 2026

chore(deps): bump vitest from 5.0.0 to 5.0.1 in /frontend in the vite group across 1 directory #1643

Closed

JamesDoingStuff approved these changes Sep 23, 2026

View reviewed changes

JamesDoingStuff merged commit cf093e4 into main Sep 23, 2026
72 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/frontend/minor-d519d619e5 branch September 23, 2026 13:17

Navigation Menu

chore(deps): bump the minor group across 1 directory with 5 updates - #1644

chore(deps): bump the minor group across 1 directory with 5 updates#1644
JamesDoingStuff merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-d519d619e5

dependabot Bot commented on behalf of github Sep 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Icon Library	License	Version	Count
Circum Icons	MPL-2.0 license	1.0.0	288
Font Awesome 5	CC BY 4.0 License	5.15.4-3-gafecf2a	1612
Font Awesome 6	CC BY 4.0 License	6.7.2-1-g840c215	2060
Ionicons 4	MIT	4.6.3	696
Ionicons 5	MIT	5.5.4	1332
Material Design icons	Apache License Version 2.0	4.0.0-161-gf3fb4442b2	4341
Typicons	CC BY-SA 3.0	2.1.2	336
Github Octicons icons	MIT	18.3.0	264
Feather	MIT	4.29.2	287
Lucide	ISC	0.462.0	1541
Game Icons	CC BY 3.0	12920d6565588f0512542a3cb0cdfd36a497f910	4040
Weather Icons	SIL OFL 1.1	2.0.12	219
Devicons	MIT	1.8.0	192
Ant Design Icons	MIT	4.4.2	831
Bootstrap Icons	MIT	1.13.1	2754
Remix Icon	Apache License Version 2.0	4.9.1	3229
Flat Color Icons	MIT	1.0.2	329
Grommet-Icons	Apache License Version 2.0	4.14.0	637
Heroicons	MIT	1.0.6	460
Heroicons 2	MIT	2.2.0	972
Simple Icons	CC0 1.0 Universal	16.24.0	3446
Simple Line Icons	MIT	2.5.5	189
IcoMoon Free	CC BY 4.0 License	d006795ede82361e1bac1ee76f215cf1dc51e4ca	491
BoxIcons	MIT	2.1.4	1634
css.gg	MIT	2.1.4	704
VS Code Icons	CC BY 4.0	0.0.0	612
Tabler Icons	MIT	3.44.0	6146
Themify Icons	MIT	v0.1.2-2-g9600186	352
Radix Icons	MIT	`@radix-ui/react-icons@1`.3.2-35-g112af91	332
Phosphor Icons	MIT	2.1.1	9072
Icons8 Line Awesome	MIT	1.3.1	1544

Conversation

dependabot Bot commented on behalf of github Sep 23, 2026

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

Internal 🏠

Committers: 2

26.2.4

26.2.3

8.5.28

8.5.27

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.28

8.5.27

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

v5.7.0

What's Changed

v5.6.0

What's Changed

v5.0.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant