deps: bump the safe-dependencies group across 2 directories with 23 updates

[dependabot]

Bumps the safe-dependencies group with 21 updates in the / directory:

Package	From	To
@tanstack/react-query	5.90.11	5.90.17
@ugrc/utah-design-system	1.34.0	1.34.1
betterknown	1.1.1	1.2.0
firebase	12.6.0	12.7.0
firebase-functions	7.0.0	7.0.3
react	19.2.1	19.2.3
@types/react	19.2.7	19.2.8
react-aria	3.44.0	3.45.0
react-aria-components	1.13.0	1.14.0
react-dom	19.2.1	19.2.3
react-error-boundary	6.0.0	6.0.3
react-stately	3.42.0	3.43.0
@typescript-eslint/eslint-plugin	8.48.1	8.52.0
@vitejs/plugin-react	5.1.1	5.1.2
autoprefixer	10.4.22	10.4.23
eslint	9.39.1	9.39.2
firebase-tools	14.26.0	14.27.0
lucide-react	0.544.0	0.562.0
prettier-plugin-packagejson	2.5.20	2.5.21
tailwindcss	3.4.18	3.4.19
vite	7.2.6	7.3.1

Bumps the safe-dependencies group with 4 updates in the /functions directory: eslint, firebase-tools, @google-cloud/cloud-sql-connector and ky.

Updates @tanstack/react-query from 5.90.11 to 5.90.17

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.17

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.91.14
  • @​tanstack/react-query@​5.90.15

@​tanstack/react-query@​5.90.17

Patch Changes

• Updated dependencies [269351b]:
  • @​tanstack/query-core@​5.90.17

@​tanstack/react-query-persist-client@​5.90.16

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.91.13
  • @​tanstack/react-query@​5.90.14

@​tanstack/react-query@​5.90.16

Patch Changes

• fix(react-query): allow retryOnMount when throwOnError is function (#9338)

• Updated dependencies [7f47906]:

  • @​tanstack/query-core@​5.90.16

@​tanstack/react-query-persist-client@​5.90.15

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.91.12
  • @​tanstack/react-query@​5.90.13

@​tanstack/react-query@​5.90.15

Patch Changes

• Updated dependencies [fccef79]:
  • @​tanstack/query-core@​5.90.15

@​tanstack/react-query@​5.90.14

Patch Changes

• Updated dependencies [d576092]:
  • @​tanstack/query-core@​5.90.14

Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.17

Patch Changes

• Updated dependencies [269351b]:
  • @​tanstack/query-core@​5.90.17

5.90.16

Patch Changes

• fix(react-query): allow retryOnMount when throwOnError is function (#9338)

• Updated dependencies [7f47906]:

  • @​tanstack/query-core@​5.90.16

5.90.15

Patch Changes

• Updated dependencies [fccef79]:
  • @​tanstack/query-core@​5.90.15

5.90.14

Patch Changes

• Updated dependencies [d576092]:
  • @​tanstack/query-core@​5.90.14

5.90.13

Patch Changes

• Updated dependencies [4a0a78a]:
  • @​tanstack/query-core@​5.90.13

5.90.12

Patch Changes

• Updated dependencies [72d8ac5]:
  • @​tanstack/query-core@​5.90.12

Commits

• bf7f47e ci: Version Packages (#10033)
• 44c3cb9 test(react-query/ssr): add 'useQueries' test for SSR (#9996)
• 167db32 ci: Version Packages (#10005)
• 4be3ad7 fix(react-query): allow retryOnMount when throwOnError is function (#9336) (#...
• 0a1e3e0 ci: Version Packages (#10003)
• fccef79 fix(query-core): ensure query refetches on mount/retry when status is error (...
• e907f89 fix(core): report errors of useMutation callbacks asynchronously (#9676)
• 84564f1 ci: Version Packages (#10001)
• 642f72d test(react-query/ssr): add 'useIsFetching' test for SSR (#9994)
• 1d20c48 ci: Version Packages (#9997)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​tanstack/react-query since your current version.

Updates @ugrc/utah-design-system from 1.34.0 to 1.34.1

Release notes

Sourced from @​ugrc/utah-design-system's releases.

utah-design-system: v1.34.1

1.34.1 (2026-01-14)

Bug Fixes

• social-media: replace link component with native anchor tag (1dcd020)

Commits

• d4b6be7 chore: release main
• cf8b81a chore(deps): bump the ci-dependencies group with 2 updates
• 836421a fix(monorepo): finish removing layer selector
• 1dcd020 fix(social-media): replace link component with native anchor tag
• 96591b7 chore(layer-selector): deprecate
• a768a51 docs: update readme
• e53c067 chore(monorepo): remove unused file
• See full diff in compare view

Updates betterknown from 1.1.1 to 1.2.0

Release notes

Sourced from betterknown's releases.

v1.2.0

Minor Changes

• 3ca5284: Support for stringifying according to OGC SFA 1.2.0 standard. Specifically, this changes the MULTIPOINT syntax: in 1.2.0, a MULTIPOINT looks like MULTIPOINT ((1 2),(3 4)). In previous versions, it looks like MULTIPOINT (1 2,3 4).

  You can choose a specific version by supplying an options argument to geoJsonToWkt:

  geoJSONToWkt(
    {
      type: "MultiPoint",
      coordinates: [
        [1, 2],
        [3, 4],
      ],
    },
    { version: "1.2.0" }
  );

  There is no version option for parsing WKT at this point, because it cleanly parses 1.1.1 and 1.2.0 already.

Changelog

Sourced from betterknown's changelog.

1.2.0

Minor Changes

• 3ca5284: Support for stringifying according to OGC SFA 1.2.0 standard. Specifically, this changes the MULTIPOINT syntax: in 1.2.0, a MULTIPOINT looks like MULTIPOINT ((1 2),(3 4)). In previous versions, it looks like MULTIPOINT (1 2,3 4).

  You can choose a specific version by supplying an options argument to geoJsonToWkt:

  geoJSONToWkt(
    {
      type: "MultiPoint",
      coordinates: [
        [1, 2],
        [3, 4],
      ],
    },
    { version: "1.2.0" }
  );

  There is no version option for parsing WKT at this point, because it cleanly parses 1.1.1 and 1.2.0 already.

Commits

• 09ea548 Version Packages (#27)
• 3ca5284 Support stringifying into 1.2.1 standard (#26)
• See full diff in compare view

Updates firebase from 12.6.0 to 12.7.0

Release notes

Sourced from firebase's releases.

firebase@12.7.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/auth@​1.12.0

Minor Changes

• 1e406a2 #9410 - Upgraded react-native-async-storage peerDependency to v2+.

firebase@12.7.0

Minor Changes

• Update root "firebase" package as a "minor" release due to bumps in: @​firebase/auth.

Patch Changes

• Updated dependencies [1e406a2, bc2b2cd, 5c7430d, 5940794]:
• @​firebase/auth@​1.12.0
• @​firebase/ai@​2.6.1
• @​firebase/firestore@​4.9.3
• @​firebase/auth-compat@​0.6.2
• @​firebase/firestore-compat@​0.4.3

@​firebase/ai@​2.6.1

Patch Changes

• bc2b2cd #9399 - update the link /genai to /ailogic

• 5c7430d #9381 - Fix generateContentStream returning wrong inferenceSource.

@​firebase/auth-compat@​0.6.2

Patch Changes

• Updated dependencies [1e406a2]:
• @​firebase/auth@​1.12.0

@​firebase/firestore@​4.9.3

Patch Changes

• 5940794 #9386 (fixes #9378) - Fix: Corrected misleading error message when doc() is called with undefined.

@​firebase/firestore-compat@​0.4.3

... (truncated)

Commits

• 8e26a55 Version Packages (#9428)
• 4cc583c Merge main into release
• bc2b2cd update link to /ailogic (#9399)
• 5511b4f test(ai): Add all general use models to integration tests (#9413)
• 1e406a2 add changeset for #9385 (#9410)
• a09ef78 build(deps): update optional react-native-async-storage peerDependency to v2+...
• 5c7430d fix(ai): Fix generateContentStream returning wrong inferenceSource. (#9381)
• f5fc6bf test(ai): Remove flaky token count integration expect directives (#9401)
• 9101b46 test(ai): prompt for grep string in debug script (#9400)
• e6415dd test(ai): run prompt templates integration tests against prod endpoint (#9387)
• Additional commits viewable in compare view

Updates firebase-functions from 7.0.0 to 7.0.3

Release notes

Sourced from firebase-functions's releases.

v7.0.3

• Internal improvements.

v7.0.2

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#1776)
• Allow JsonSecretParam in function secrets option arrays. (#1788)

v7.0.1

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#1780)

Commits

• b654b85 7.0.3
• 8f65eaf Hide onGraphRequest API for now. (#1792)
• e7cb2ef Initial FDC resolver support in functions SDK. (#1784)
• cfba53d [firebase-release] Removed change log and reset repo after 7.0.2 release
• e6d5c66 7.0.2
• a35cc87 7.0.2-rc.0
• bb407c6 fix: export param types from firebase-functions/params (#1789)
• fd0e291 fix: allow JsonSecretParam in secrets array (#1788)
• 3577d9b feat: remove attemptDeadlineSeconds in v2 scheduled functions (#1776)
• b024089 [firebase-release] Removed change log and reset repo after 7.0.1 release
• Additional commits viewable in compare view

Updates react from 19.2.1 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

Commits

• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.8

Commits

• See full diff in compare view

Updates react-aria from 3.44.0 to 3.45.0

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates react-aria-components from 1.13.0 to 1.14.0

Release notes

Sourced from react-aria-components's releases.

December 16, 2025 Release

Wrapping up this year with a bang and our most exciting release yet! Meet our new website. We heard your feedback and have reimagined the docs to be more concise and make greater use of interactive examples using prop controls. Code examples have been refined to highlight what matters most, and real-world app examples show how all these pieces come together. The new search experience includes image previews and category and library filtering, helping you find what you need faster. There are more component examples, new guides, AI-friendly page markdown, and MCP servers, all wrapped up in a fresh new look. 🎁 Explore the updated experience of React Aria.

Along with our new look, we have released a stable version of Spectrum 2, a major update to Adobe’s Design System built on top of React Aria Components. Spectrum 2 delivers modern, refined components with better accessibility, performance, and styling flexibility using style macros. Use our updated search to browse the new components, or visit our migration guide to learn how to upgrade. Check it out!

As usual, we have included various new features and bug fixes, including support for animated Tab transitions in React Aria, and inline TableView editing in React Spectrum. Thank you to all our contributors in this release and from this past year. We hope you enjoy the updates, see you in 2026!

• React Aria release notes
• React Spectrum release notes

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates react-dom from 19.2.1 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

Commits

• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• See full diff in compare view

Updates react-error-boundary from 6.0.0 to 6.0.3

Release notes

Sourced from react-error-boundary's releases.

6.0.3

• Removed react-dom from peer dependencies list; it was accidentally added during a previous internal refactor

6.0.2

Updated README and generated TS docs

6.0.1

Updated README and generated docs

Commits

• 186ae40 6.0.2 -> 6.0.3
• bc1e74b 6.0.1 -> 6.0.2
• 9d2cb82 Tweaked FAQ header
• e39086d Update react-lib-tools dep
• 6a51a1a Add FAQ section to docs
• f33ab81 Update react-lib-tools dep
• 27d8a8f Replace og.svg with og.png
• ea18878 Update react-lib-tools dep
• 8074ad8 Update react-lib-tools dep
• 1d95257 Empty commit
• Additional commits viewable in compare view

Updates react-stately from 3.42.0 to 3.43.0

Release notes

Sourced from react-stately's releases.

July 22, 2025 Release

Happy summer! This release adds support for async loading and infinite scrolling, improves form integration and drag and drop interactions, and adds support for additional DOM events and attributes.

The new LoadMoreItem components supported in ListBox, GridList, Table, and Tree enables infinite scrolling. These trigger the loading of additional pages of items and display a loading spinner. Multiple LoadMoreItems can be rendered within a collection too, enabling loading multiple levels of a tree or sections of data from different APIs.

We've also opened up the React Aria Components API to pass through more DOM events and attributes. This improves integration with other libraries, for example making it possible to use another library's menu with a React Aria button.

As always, thanks so much to everyone who contributed to this release!

Full release notes

June 5, 2025 Release

Drop everything! Drag and drop support in React Aria Tree has been released! 🫳🎤 This supports moving items within a tree or between collection components, with full keyboard and screen reader accessibility. It's interoperable with our existing drag and drop support in components like Table and GridList, and with third party apps via native HTML APIs. Check out our previous blog post on drag and drop to learn about the interactions, and our new Tree drag and drop documentation.

This release also includes some highly requested bug fixes, including scrollbar layout shifts when opening popovers and modals, date picker interaction improvements, and enhancements to our form components.

As always, thank you to our community for their support and contributions!

Full Release Notes

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates @types/react from 19.2.7 to 19.2.8

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.48.1 to 8.52.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
• typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

• Josh Goldberg ✨
• Ulrich Stark

You can read about our versioning strategy and releases on our website.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

• eslint-plugin: expose rule name via RuleModule interface (#11719)
• eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
• eslint-plugin: add namespace to plugin meta (#11885)
• tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

• eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
• eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
• eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
• eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Ulrich Stark
• Yannick Decat @​mho22
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.50.1

8.50.1 (2025-12-22)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)
• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

• Josh Goldberg ✨
• Ulrich Stark

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

🚀 Features

• eslint-plugin: add namespace to plugin meta (#11885)
• eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
• eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
• eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
• eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Ulrich Stark
• Yannick Decat @​mho22

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)
• eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

... (truncated)

Commits

• 9ddd571 chore(release): publish 8.52.0
• 6b467b0 docs: add blog post on revamping the ban-types rule (#11873)
• 309a38e fix(eslint-plugin): [no-base-to-string] detect @@​toPrimitive and valueOf (#11...
• cf79108 fix(eslint-plugin): [no-useless-default-assignment] handle conditional initia...
• a166cea feat(eslint-plugin-internal): [no-multiple-lines-of-errors] add rule (#11899)
• d1b44c0 chore(deps): update nx monorepo to v22.3.3 (#11848)
• 95c7c73 chore: update deps to latest minor/patch (#11921)
• 45a7d2b chore(typescript-estree): use iterateComments() from ts-api-utils v2.3 (#11...
• e4c57f5 chore(release): publish 8.51.0
• c7b698b feat(eslint-plugin): add namespace to plugin meta (#11885)
• Additional commits viewable in compare view

Updates @vitejs/plugin-react from 5.1.1 to 5.1.2

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.1.2 (2025-12-08)

Commits

• f127a24 release: plugin-react@5.1.2
• db1c665 fix(react): newer full bundle mode compat (#1011)
• 1f372b6 fix(deps): update all non-major dependencies (#1008)
• d52455e fix(deps): update react 19.2.1 (#998)
• bcda041 fix(deps): update all non-major dependencies (#995)
• c80546d fix(deps): update all non-major dependencies (#982)
• See full diff in compare view

Updates autoprefixer from 10.4.22 to 10.4.23

Release notes

Sourced from autoprefixer's releases.

10.4.23

• Reduced dependencies (by @​hyperz111).

Changelog

Sourced from autoprefixer's changelog.

10.4.23

• Reduced dependencies (by @​hyperz111).

Commits

• 212ba3c Release 10.4.23 version
• 7f62fb6 Update dependencies
• c455bb1 chore: inline and simplify normalize-range (#1539)
• See full diff in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• 9278324 9.39.2
• 542266a Build: changelog update for 9.39.2
• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
• c43ce24 chore: package.json update for @​eslint/js release
• 5705833 fix: warn when eslint-env configuration comments are found (#20381)
• 506f154 build: add .scss files entry to knip (#20391)
• 4c9858e ci: add v9.x-dev branch (#20382)
• See full diff in compare view

Updates firebase-tools from 14.26.0 to 14.27.0

Release notes

Sourced from firebase-tools's releases.

v14.27.0

• Fixed issue where MCP server didn't detect if iOS app uses Crashlytics in projects that use project.pbxproj (#9515)
• Add logic to synchronize v2 scheduled function timeout with Cloud Schduler's attempt deadline (#9544)
• Prevent deployments of Next.js apps vulnerable to CVE-2025-66478 (#9572)
• Updated Data Connect emulator to v2.17.3:
  • Fixed Swift codegen: Include FirebaseCore import in the connector keys file.
  • Fixed a bug where debug details of Internal errors were swallowed: firebase/firebase-tools#9508

Commits

• fe59d29 14.27.0
• a893579 Fix typo in release script
• 763951a prevent deployments of Next.js apps vulnerable to CVE-2025-66478 (#9572)
• c23ac23 Update past react 19.2.0 (#9566)
• 5677708 Data Connect Emulator release v2.17.3 (#9573)
• bc0e7ea Fix remoteconfig:versions:list error (#9549)