Update npm dependencies#815
Merged
Merged
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
✅ Deploy Preview for ucmacm ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
No767
disabled auto-merge
July 20, 2026 16:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.2.8→5.3.04.3.2→4.3.31.33.1→1.33.21.170.17→1.170.181.168.19→1.168.234.6.1→4.7.05.14.5→5.17.25.14.5→5.17.25.14.5→5.17.25.14.5→5.17.21.24.0→1.25.0^0.58.0→^0.59.01.73.0→1.74.0^0.7.8→^0.8.0^0.24.0→^0.25.011.12.0→11.15.0^15.0.0→^19.0.04.13.0→4.13.14.3.2→4.3.38.63.0→8.64.08.1.4→8.1.5Release Notes
fontsource/font-files (@fontsource-variable/raleway)
v5.3.0Compare Source
tailwindlabs/tailwindcss (@tailwindcss/vite)
v4.3.3Compare Source
Fixed
--watch --poll[=ms]in@tailwindcss/cliwhen filesystem events are unreliable or unavailable (#20297)bg-[#fff]andbg-[#FFF]→bg-white) (#20298)iframe:focus-visibleoutline styles (#20292)theme('colors.foo')in JS plugins resolves correctly when both--color-fooand--color-foo-barexist (#20299)shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5, andinset-shadow-sm/12.5(#20302)[data-foo]divas two selectors instead of one (#20303)@tailwindcss/postcssrebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)@tailwindcss/browserand Tailwind Play (#20124)oklch(#20314)--spacing(0)is optimized to0pxinstead of0so it remains a<length>when used incalc(…)(#20319)@parcel/watcheronly when needed in@tailwindcss/cli --watchmode, so one-off builds and--watch --pollwork when@parcel/watchercan't be loaded (#20325)system-uiandui-sans-serifso CJK text respects the page'slangattribute on Windows (#20318)@tailwindcss/upgradefrom rewriting ignored files when run from a subdirectory (#20329)@sourcerules pointing to nested files are scanned when later@sourcerules point to files in parent folders (#20335)@tailwindcss/vitefrom triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)TanStack/form (@tanstack/react-form)
v1.33.2Compare Source
Patch Changes
#2240
d756476- Use fresh FieldApi in current render on name changeUpdated dependencies []:
TanStack/router (@tanstack/react-router)
v1.170.18Compare Source
Patch Changes
e2dd204]:TanStack/router (@tanstack/router-plugin)
v1.168.23Compare Source
Patch Changes
49f6863- Preserve React component state during HMR when route components are declared with lowercase function names. The development-only React transforms cover split route component groups and unsplit root route component options, including shell, pending, and error components, without changing production output.v1.168.22Compare Source
Patch Changes
78dd1a6]:v1.168.21Compare Source
Patch Changes
e56a677]:v1.168.20Compare Source
Patch Changes
e2dd204]:schoero/eslint-plugin-better-tailwindcss (eslint-plugin-better-tailwindcss)
v4.7.0Compare Source
compare changes
Features
vueConvertToBindingoption (#388)Fixes
Documentation
❤️ Contributors
Rel1cx/eslint-react (eslint-plugin-react-dom)
v5.17.2Compare Source
📝 Documentation
@eslint-react/kit: added a README with quick start and API overview.🏗️ Internal
@eslint-react/core: migratedJsxDetectionHintand related JSX detection helpers from@eslint-react/jsx. (#1913)@eslint-react/jsx: consolidated helpers into focusedattribute,children,element, andtextmodules. (#1914)@eslint-react/var: renamedcomputeObjectTypetoresolveObjectType.@local/testkit: extracted shared test helpers into a new local package. (#1915)tsdownto0.22.9,eslint-plugin-jsdocto63.0.14, andpnpmto11.13.1.Full Changelog: Rel1cx/eslint-react@v5.17.1...v5.17.2
v5.17.1Compare Source
🏗️ Internal
react-jsx/no-key-after-spread: reworked the attribute scan to a pipeline style usingdropWhileandnotfrom@local/eff,Check.isfrom@eslint-react/ast, and the newisAttributehelper from@eslint-react/jsx. (#1912)@eslint-react/jsx: addedisAttributefor matching JSX attributes by name.@local/eff: addeddropWhileandtakeWhile.tsdownto0.22.8,tsl-dxto0.13.3,import-integrity-lintto1.1.4,fumadocsto16.11.5, andfumadocs-mdxto15.2.0.Full Changelog: Rel1cx/eslint-react@v5.17.0...v5.17.1
v5.17.0Compare Source
🐞 Fixes
react-jsx/no-leaked-dollar: the intentional-$exemption (e.g.<div>${price}</div>) is no longer defeated by surrounding whitespace or empty siblings — a lone$before a single expression is now allowed whenever all other siblings are non-substantive. (#1911)react-jsx/no-leaked-semicolon: consecutive leaked semicolons (e.g.;;) at the start of a JSX text node are now detected. (#1911)📝 Documentation
react-x/no-unnecessary-use-prefix: reorganized the rule examples.🏗️ Internal
react-jsx: extracted the sharedfind-create-element-children-propandremove-jsx-attributerule helpers, removed deadLiteralvisitors fromno-comment-textnodesandno-leaked-semicolon, simplified theno-key-after-spreadattribute scan, and hoistedno-useless-fragmentdetection and fix helpers to module level. (#1911)@local/eff: synced theFunctionmodule with effect and added missing@categorytags.Full Changelog: Rel1cx/eslint-react@v5.16.1...v5.17.0
v5.16.1Compare Source
🐞 Fixes
react-jsx/no-children-prop:React.createElementcalls whose props argument is wrapped in a TypeScript type assertion (e.g.{ children: "x" } as Props) are now reported; computed property keys written as template literals (e.g.{ [children]: "x" }) are now recognized as thechildrenprop; fixed a false positive where a computed identifier key in acreateElementprops object (e.g.{ [propName]: "Children" }) was treated as the staticchildrenprop; the suggestion fix now escapes JSX-sensitive characters (<,>,{,},&) when moving a stringchildrenprop value into element content. (#1910)react-jsx/no-children-prop-with-children: samecreateElementedge-case fixes asno-children-prop. (#1910)react-jsx/no-useless-fragment:allowExpressions: falsenow only flags fragments with a single expression child, matching the option's documented behavior, instead of flagging any fragment inside a JSX element; fragments with spread attributes (e.g.<Fragment {...props}>) are no longer auto-fixed; the auto-fixer now removes leading indentation when collapsing whitespace-only fragments. (#1910)react-jsx/no-leaked-dollar:$character references (&#​36;,$) are no longer treated as leaked dollar signs; only a literal$in the source is reported. (#1910)react-jsx/no-leaked-semicolon: leaked semicolons followed by spaces or tabs before a newline, including CRLF line endings, are now detected. (#1910)react-x/immutability: addeduseHistoryto known navigation hooks, so navigation methods such as.push()are not treated as in-place mutations inside frozen callbacks.🏗️ Internal
@eslint-react/ast: addedExtract.getStaticPropertyNamefor resolving static property names from object properties. (#1910)Full Changelog: Rel1cx/eslint-react@v5.16.0...v5.16.1
v5.16.0Compare Source
✨ New
@eslint-react/core: added support for hook calls written as tagged template literals. (#1909)@eslint-react/jsx:findAttributenow resolves nested spread identifiers and nested object expression spreads. (#1908)🏗️ Internal
Full Changelog: Rel1cx/eslint-react@v5.15.0...v5.16.0
v5.15.0Compare Source
📝 Documentation
🏗️ Internal
typescript-eslintto8.64.0,nxto23.1.0,eslint-plugin-package-jsonto1.6.0, andpnpmto11.13.0.strictBooleanExpressionsin TSL and synchronized sample rule configurations. (#1907)pnpm/action-setupinstead of installing pnpm globally via npm.Full Changelog: Rel1cx/eslint-react@v5.14.10...v5.15.0
v5.14.10Compare Source
🐞 Fixes
@eslint-react/ast:Extract.getCalleeNamenow returnsnullfor computed member expressions (e.g.obj[foo](),obj["foo"](),obj[foo]()) instead of the property name, so callers don't treat dynamically chosen methods as static method names. (#1906)🏗️ Internal
Extract.getCalleeName.Full Changelog: Rel1cx/eslint-react@v5.14.9...v5.14.10
v5.14.9Compare Source
🐞 Fixes
@eslint-react/ast: removedExtract.getPropertyNameand addedExtract.getCalleeNamefor simpler callee name resolution. (#1905)obj["foo"]()is no longer resolved to"foo"). This avoids relying on the runtime value of computed keys and aligns callee matching across the codebase. Affected rules:react-dom/no-dangerously-set-innerhtmlreact-dom/no-find-dom-nodereact-dom/no-flush-syncreact-web-api/no-leaked-event-listenerreact-web-api/no-leaked-fetchreact-x/globalsreact-x/immutabilitycore.isJsxLike: no longer treatsReact['createElement']calls as JSX-like, since the callee is accessed through a computed member expression.🏗️ Internal
core,react-dom,react-web-api, andreact-xrules usingExtract.getCalleeName.@effect/platform,effect,fumadocs-core,fumadocs-mdx,fumadocs-ui,postcss,pnpm, andtsdown.Full Changelog: Rel1cx/eslint-react@v5.14.8...v5.14.9
v5.14.8Compare Source
📝 Documentation
react-x: refreshed the React Compiler diff reports. (#1903)🏗️ Internal
react-x: moved the purity and refs resolvers intolib.ts. (#1902)tsdown,postcss, andfumadocs.Full Changelog: Rel1cx/eslint-react@v5.14.7...v5.14.8
v5.14.7Compare Source
🐞 Fixes
react-x/immutability: ignore navigation hook methods (e.g.useNavigate,useNavigation) as mutations. (#1901)🏗️ Internal
pnpmlockfile.Full Changelog: Rel1cx/eslint-react@v5.14.6...v5.14.7
v5.14.6Compare Source
🐞 Fixes
react-x/immutability: ignoreuseRouter()navigation methods (e.g..push()) as mutations when they appear inside frozen callbacks; aliases created through variable declarators are also recognized. (#1898)🏗️ Internal
Check.isExpressionto@eslint-react/astalong with unit tests.eslint,nx,dompurify, andpnpm.react-x/immutabilityanalysis helpers by sharing initializer provenance checks foruseRef()anduseRouter()and using AST parent traversal for function-boundary detection.Full Changelog: Rel1cx/eslint-react@v5.14.5...v5.14.6
lucide-icons/lucide (lucide-react)
v1.25.0Compare Source
oxc-project/oxc (oxfmt)
v0.59.0Compare Source
🐛 Bug Fixes
415fe1eoxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)oxc-project/oxc (oxlint)
v1.74.0Compare Source
🚀 Features
0433a83linter/eslint/no-inner-declarations: Addnamespacesoption (#24044) (Boshen)🐛 Bug Fixes
8337835linter: Error onignorePatternsthat cannot match files aoutside the config directory (#24341) (leaysgur)2ce5a33linter: ResolveignorePatternsrelative to the config dir (#24339) (leaysgur)⚡ Performance
7f80caclinter/vue/prop-name-casing: PrecompileignorePropsregex pattern (#24413) (connorshea)6272051linter/typescript/no-require-imports: Compile allow patterns once (#24417) (connorshea)33805b9linter/jsdoc/require-param: Compile checkTypesPattern regex once (#24420) (connorshea)millionco/react-doctor (oxlint-plugin-react-doctor)
v0.8.1Compare Source
v0.8.0Compare Source
Patch Changes
#1269
cf7ada5Thanks @aidenybai! - Detect cleanup leaks in React ref callbacks invoked directly from effects#1373
ac392cbThanks @aidenybai! - Allow hook-use-state to recognize concise-arrow returns as returned state tuples.#1277
b30fb80Thanks @aidenybai! - Fix no-pass-data-to-parent to detect parent callbacks stored in refs and refreshed by a preceding effect.#1353
0ff57faThanks @aidenybai! - Detect no-hydration-branch-on-browser-global through local helpers and React useMemo.#1308
b2f3c9cThanks @aidenybai! - Fixeffect-needs-cleanupto follow synchronous React ref callback chains so timers and subscriptions reached through multiple ref callbacks are not missed.#1283
9aa98b9Thanks @aidenybai! - Keep rn-no-falsy-and-render scoped to numeric gates rendered through React Native or unknown hosts, excluding proven DOM-host output in mixed-renderer projects.#1362
44d3ad8Thanks @aidenybai! - Resolve React hooks by binding identity across state and effect rules, including named imports, immutable aliases, namespace calls, and isomorphic effect aliases.#1351
3c90f14Thanks @aidenybai! - Avoid false positives fromrendering-usetransition-loadingwhen FileReader success and error callbacks complete the loading state.#1271
f563205Thanks @aidenybai! - Fixno-uncontrolled-inputfalse positives for input types whosevalueis read-only in React, including types behind deep const aliases and constant ternaries.#1276
7eb7428Thanks @aidenybai! - Fixrole-supports-aria-propsfalse positives for native number inputs and unresolved input types.#1309
f59ec54Thanks @aidenybai! - Stop no-create-ref-in-function-component from warning on createRef values stored as initial React state.#1289
a86b5b0Thanks @aidenybai! - Fix no-render-in-render false positives from hooks in uninvoked nested closures#1294
d7d38d7Thanks @aidenybai! - Recognize browser reads gated by a local or project-importeduseSyncExternalStoreHook with a false server snapshot.#1319
52fc179Thanks @aidenybai! - Preserve helper-owned gesture state when an effect also synchronizes it, and keep derived-state detection through transparent React hook receivers.#1292
1adf327Thanks @aidenybai! - Recognize immutable and isomorphic React effect aliases inno-chain-state-updates.#1263
194cc06Thanks @aidenybai! - Improveno-create-ref-in-function-componentprecision for render-local attachment refs while preserving stale-ref diagnostics.#1299
c88a39aThanks @aidenybai! - Prevent no-effect-chain from reporting clear-only state writes when their values cannot reach downstream guarded work.#1315
3e6dcfcThanks @skoshx! - Recognize matchinghtmlForassociations from components already treated as label renderers incontrol-has-associated-label.#1288
be6d64bThanks @aidenybai! - Fix async-parallel and server-sequential-independent-await to distinguish shadowed callback bindings from genuine result dependencies.#1355
0fbf728Thanks @aidenybai! - Avoid effect-needs-cleanup false positives for gesture listeners that synchronously remove themselves and their peer listeners.#1280
30e0ff0Thanks @aidenybai! - Align iframe-has-title with the accessibility rule's applicability boundary by ignoring frames proven hidden, excluded from sequential focus, or explicitly decorative while preserving diagnostics for uncertain and visible frames.#1333
11388bfThanks @aidenybai! - Detect parent callback synchronization through React wrappers, immutable aliases, refs, conditional branches, object members, and prop-initialized custom-hook state.#1343
71892afThanks @aidenybai! - Avoideffect-needs-cleanupfalse positives when auseSyncExternalStoresubscribe callback returns a delegated disposer through a conditional or nullish fallback.#1282
81da42bThanks @aidenybai! - Avoid server-fetch-without-revalidate false positives for imported or local fetch implementations.#1286
e5d5753Thanks @aidenybai! - Preventprefer-module-scope-static-valuefrom recommending behavior-changing hoists for randomness accessed through proven global receivers.#1266
66a1db8Thanks @skoshx! - Fix a false positive inonly-export-componentsfor exporteduse[A-Z]custom hooks alongside component exports.#1320
b392093Thanks @skoshx! - Ignore parser-confirmed comments whenartifact-env-leakscans generated JavaScript and TypeScript artifacts, while preserving executable env-leak detection.#1317
6c5c91bThanks @skoshx! - Avoidserver-after-nonblockingdiagnostics for side effects proven to run through Next.jsafter()callbacks.#1297
d8a20e0Thanks @aidenybai! - Recognize type- and write-proven falsy lazy initialization guards inno-ref-current-in-render.#1345
f441f59Thanks @aidenybai! - Avoideffect-needs-cleanupfalse positives for legacy unary media-query listeners with matching cleanup.#1303
174955cThanks @aidenybai! - Fixno-create-ref-in-function-componentfalse positives for test-local components proven to be mounted only in independent React Testing Library roots.#1328
bd3655cThanks @aidenybai! - Detect immediate viewport state adoption in a mount effect that registers and cleans up a resize listener.#1350
db5fe10Thanks @aidenybai! - Avoid treating human-readable storage key names with camelCase segments as hardcoded secrets.#1363
c1e75f0Thanks @aidenybai! - Fixno-jsx-element-typefalse positives on private renderer factories that accurately return one JSX element.#1287
796a56dThanks @aidenybai! - Require native global Intl provenance before reporting formatter construction hoisting diagnostics.#1278
558118cThanks @aidenybai! - Fix interactive-supports-focus false positives on native content-editable editing hosts while preserving nested and disabled-host diagnostics.#1279
d4db626Thanks @aidenybai! - Fixno-reset-all-state-on-prop-changefalse positives for loading state completed by an exact async helper.#1349
a16e452Thanks @aidenybai! - Accept event listeners whose local AbortController is replaced through a React ref and aborted on unmount.#1281
d3f54c4Thanks @aidenybai! - Prevent nextjs-no-css-link from recommending local CSS imports for statically proven remote HTTP(S) stylesheets.#1360
e5a5f73Thanks @aidenybai! - Avoid effect-needs-cleanup false positives when listener disposers are retained in React refs and invoked during effect or callback-ref cleanup.#1301
6325f9cThanks @aidenybai! - Stop nextjs-no-img-element from prescribing next/image for exported JSX helpers proven to render only through ImageResponse or Satori.#1295
e86bc57Thanks @aidenybai! - Require semantic React component evidence before treating PascalCase function parameters as props.#1358
4f3848bThanks @aidenybai! - Resolve React effect, state setter, and dependency aliases by binding identity so chained and derived state diagnostics cannot be silenced by immutable renames.#1368
093619cThanks @aidenybai! - Fix effect-needs-cleanup false positives for generation-guarded nested subscriptions owned by an effect.#1274
21827daThanks @aidenybai! - Avoid reportinganchor-has-contentfor href-less anchors without link semantics.#1270
12e9592Thanks @aidenybai! - Avoidno-default-propsfalse positives for stable class receivers, which React 19 continues to support.#1296
c7f61cdThanks @aidenybai! - Keepno-effect-chainquiet for effects that wait for a committed DOM node before focusing, scrolling, selecting, or measuring it.#1336
95f9937Thanks @aidenybai! - Disableno-chain-state-updatesfor React 18 and newer projects.#1354
0f11de1Thanks @aidenybai! - Recognize bounded render-derived equivalents inexhaustive-depsdependency lists.#1306
1b86daeThanks @aidenybai! - Fix prefer-module-scope-static-value false positives for per-render arrays and objects mutated through nested members.#1324
1a30f2cThanks @aidenybai! - Improve dangerous HTML sink precision for KaTeX output and unsafe fallbacks.#1347
9e55e1fThanks @aidenybai! - Avoideffect-needs-cleanupfalse positives for callback refs that release listeners from the previous node before replacing their ownership.#1352
c41f271Thanks @aidenybai! - Recognize stable values initialized once throughref.current ??=inexhaustive-deps.#1375
7e6cdf9Thanks @aidenybai! - Recognize transparent TypeScript wrappers on React and HTTP client call receivers.#1291
544356cThanks @aidenybai! - Fix prefer-use-effect-event false positives when a helper also executes synchronously.#1346
cc96f47Thanks @aidenybai! - Avoideffect-needs-cleanupfalse positives when locally observed resources are retained and exhaustively disconnected through the same collection.#1304
5f3ba37Thanks @aidenybai! - Avoid accessibility diagnostics for provenance-proven local unit-test fixtures and module mocks while preserving product and component-under-test findings.#1342
cf9acf2Thanks @aidenybai! - Avoidno-pass-data-to-parentfalse positives when destructured media-query hook state is forwarded to a parent after an external subscription update.#1293
f94d7b1Thanks @aidenybai! - Fix no-chain-state-updates false positives from stable useCallback dependencies whose bodies only write state.#1340
c245b9dThanks @aidenybai! - Avoidno-flush-syncfalse positives when an adjacent imperative DOM selection or focus handoff requires the React commit to finish synchronously.[#1272](https://redirect.gi
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.