Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 23, 2025

Bumps the minor-and-patch group with 29 updates in the / directory:

Package From To
@reduxjs/toolkit 2.8.2 2.10.1
@tanstack/react-query 5.85.3 5.90.10
@tanstack/react-query-devtools 5.85.3 5.91.0
oidc-client-ts 3.3.0 3.4.1
pbkdf2 3.1.3 3.1.5
react 19.1.1 19.2.0
@types/react 19.1.10 19.2.6
react-dom 19.1.1 19.2.0
@types/react-dom 19.1.7 19.2.3
react-router-dom 7.8.0 7.9.6
@tanstack/eslint-plugin-query 5.83.1 5.91.2
@testing-library/jest-dom 6.7.0 6.9.1
@types/lodash 4.17.20 4.17.21
@types/node 24.2.1 24.10.1
@types/papaparse 5.3.16 5.5.0
@typescript-eslint/eslint-plugin 8.39.1 8.47.0
@typescript-eslint/parser 8.39.1 8.47.0
@vitejs/plugin-react-swc 4.0.1 4.2.2
concurrently 9.2.0 9.2.1
eslint 9.33.0 9.39.1
globals 16.3.0 16.5.0
lint-staged 16.1.5 16.2.7
sass 1.90.0 1.94.2
typescript 5.9.2 5.9.3
typescript-eslint 8.39.1 8.47.0
vite 7.1.5 7.2.4
vite-plugin-node-polyfills 0.22.0 0.24.0
vite-plugin-static-copy 3.1.2 3.1.4
vite-plugin-svgr 4.3.0 4.5.0

Updates @reduxjs/toolkit from 2.8.2 to 2.10.1

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.10.1

This bugfix release fixes an issue with window access breaking in SSR due to the byte-shaving work in 2.10.

What's Changed

Full Changelog: reduxjs/redux-toolkit@v2.10.0...v2.10.1

v2.10.0

This feature release updates our Immer dep to 10.2 to pick up its performance improvements, has additional byte-shaving and internal performance updates, and fixes a combineSlices type issue.

Changelog

Immer Performance Improvements

Redux Toolkit has been built around Immer since the very first prototype in 2018. Use of Immer as the default in createSlice directly eliminated accidental mutations as a class of errors in Redux apps, and drastically simplified writing immutable updates in reducers.

We've had various issues filed over the years asking to make Immer optional, or raising concerns about Immer's perf. Immer is indeed slower than writing immutable updates by hand, but our stance has always been that Immer's DX is absolutely worth whatever modest perf cost it might incur, and that reducers are usually not the bottleneck in Redux apps anyway - it's usually the cost of updating the UI that's more expensive.

However, a year ago an issue was filed with some specific complaints about Immer perf being very slow. We investigated, ran benchmarks, and filed an Immer issue confirming that it had gotten noticeably slower over time. Immer author Michel Weststrate agreed, and said there were some potential tweaks and architectural changes that could be made, but didn't have time to look into them himself.

A couple months ago, we started investigating possible Immer perf improvements ourselves, including profiling various scenarios and comparing implementations of other similar immutable update libraries. After extensive research and development, we were able to file several PRs to improve Immer's perf: a set of smaller tweaks around iteration and caching, a couple much larger architectural changes, and a potential change to copying objects.

Immer 10.2.0 contains the first set of smaller perf improvements, and this RTK release updates our dependency to 10.2 to pick up those changes.

One important behavior note here: Earlier versions of Immer (8, 9, 10.1) added more handling for edge cases like symbol keys in objects. These changes made sense for correctness, but also contributed to the slowdown. Immer 10.2 now includes a new setUseStrictIteration option to allow only copying string keys in objects (using Object.keys() instead of Reflect.ownKeys()), but keeps the option as strict: true for compatibility with its own users. That default will likely change in Immer 11.

For RTK 2.10.0, we specifically import and call setUseStrictIteration(false), under the assumption that standard Redux state usage only involves string keys in plain JS objects! This should provide a ~10% speedup for Immer update operations. Given that expectation, we believe this is a reasonable feature change and only needs a minor version bump.

If by some chance you are using symbol keys in your Redux state, or in other Immer-powered updates in your Redux app, you can easily revert to the previous behavior by calling setUseStrictIteration(true) in your own app code.

Based on discussions with Michel, Immer v11 should come out in the near future with additional architectural changes for better perf, including optional support for faster array methods that would be available as an Immer plugin adding ~2KB bundle size. We will likely not turn that plugin on by default, but recommend that users enable it if they do frequent array ops in reducers.

We're happy to have contributed these perf improvements to Immer, and that they will benefit not just RTK users but all Immer users everywhere!

You can follow the additional discussion and progress updates in the main Immer perf update tracking issue.

Additional RTK Perf Improvements

We've tweaked some places where we were doing repeated filter().map().map() calls to micro-optimize those loops.

RTKQ tag invalidation was always reading from proxy-wrapped arrays when rewriting provided tags. It now reads from the plain arrays instead, providing a modest speedup.

We previously found that ESBuild wasn't deduplicating imports from the same libraries in separate files bundled together (ie import { useEffect as useEffect2/3/4/ } from 'react'). We've restructured our internals to ensure all external imports are only pulled in once.

We've done some extensive byte-shaving in various places in the codebase. The byte-shaving and import deduplication saves about 0.6K min from the RTKQ core, and 0.2K min from the RTKQ React bundle.

Other Changes

... (truncated)

Commits

Updates @tanstack/react-query from 5.85.3 to 5.90.10

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.10

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.7
    • @​tanstack/react-query@​5.90.8

@​tanstack/react-query@​5.90.10

Patch Changes

@​tanstack/react-query-persist-client@​5.90.9

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.6
    • @​tanstack/react-query@​5.90.7

@​tanstack/react-query@​5.90.9

Patch Changes

  • Updated dependencies [08b211f]:
    • @​tanstack/query-core@​5.90.9

@​tanstack/react-query-persist-client@​5.90.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.5
    • @​tanstack/react-query@​5.90.6

@​tanstack/react-query@​5.90.8

Patch Changes

  • Updated dependencies [c0ec9fe]:
    • @​tanstack/query-core@​5.90.8

@​tanstack/react-query-persist-client@​5.90.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.4
    • @​tanstack/react-query@​5.90.5

@​tanstack/react-query@​5.90.7

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.10

Patch Changes

5.90.9

Patch Changes

  • Updated dependencies [08b211f]:
    • @​tanstack/query-core@​5.90.9

5.90.8

Patch Changes

  • Updated dependencies [c0ec9fe]:
    • @​tanstack/query-core@​5.90.8

5.90.7

Patch Changes

  • Updated dependencies [b4cd121]:
    • @​tanstack/query-core@​5.90.7

5.90.6

Patch Changes

  • Updated dependencies [1638c02]:
    • @​tanstack/query-core@​5.90.6

5.90.5

Patch Changes

  • Updated dependencies [e42ddfe]:
    • @​tanstack/query-core@​5.90.5

5.90.4

Patch Changes

  • Updated dependencies [20ef922]:
    • @​tanstack/query-core@​5.90.4

5.90.3

... (truncated)

Commits

Updates @tanstack/react-query-devtools from 5.85.3 to 5.91.0

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.91.0

Minor Changes

  • feat(devtools): allow passing a theme via prop (#9887)

Patch Changes

  • Updated dependencies [0e9d5b5]:
    • @​tanstack/query-devtools@​5.91.0
Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.91.0

Minor Changes

  • feat(devtools): allow passing a theme via prop (#9887)

Patch Changes

  • Updated dependencies [0e9d5b5]:
    • @​tanstack/query-devtools@​5.91.0
Commits

Updates oidc-client-ts from 3.3.0 to 3.4.1

Release notes

Sourced from oidc-client-ts's releases.

v3.4.1

oidc-client-ts v3.4.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #2259 forward popupAbortOnClose to PopupNavigator.prepare

thanks to @​watabean

v3.4.0

oidc-client-ts v3.4.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #1890 optionally enforce iframe auth flow in signinSilent
    • #2180 add support for client_secret_jwt
    • #2244 optionally restore popup close rejection
  • Fixes;
    • #2147 wait until the page is shown again to resolve in RedirectNavigator

thanks to @​Hyperkid123, @​Nick-Source, @​Skizu and @​smujmaiku

Commits
  • e4c730c v3.4.1
  • 9adc363 Merge pull request #2256 from authts/dependabot/npm_and_yarn/fake-indexeddb-6...
  • 76ac9f9 build(deps-dev): bump fake-indexeddb from 6.2.4 to 6.2.5
  • 3f9c2fa Merge pull request #2257 from authts/dependabot/npm_and_yarn/globals-16.5.0
  • e365784 Merge pull request #2262 from authts/dependabot/npm_and_yarn/types/node-24.10.1
  • c36a490 Merge pull request #2263 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • 8a01125 Merge pull request #2258 from authts/dependabot/npm_and_yarn/esbuild-0.27.0
  • 389419c Merge pull request #2259 from watabean/fix/forward-popupAbortOnClose-in-signi...
  • d67fb18 build(deps-dev): bump @​microsoft/api-extractor from 7.53.3 to 7.55.0
  • 92a39a1 build(deps-dev): bump @​types/node from 22.15.21 to 24.10.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for oidc-client-ts since your current version.


Updates pbkdf2 from 3.1.3 to 3.1.5

Changelog

Sourced from pbkdf2's changelog.

v3.1.5 - 2025-09-23

Commits

  • [Fix] only allow finite iterations 67bd94d
  • [Fix] restore node 0.10 support 8f59d96
  • [Fix] check parameters before the "no Promise" bailout d2dc5f0

v3.1.4 - 2025-09-22

Commits

  • [Deps] update create-hash, ripemd160, sha.js, to-buffer 8dbf49b
  • [meta] update repo URLs d15bc35
  • [Dev Deps] update @ljharb/eslint-config aaf870b
Commits
  • 3687905 v3.1.5
  • 67bd94d [Fix] only allow finite iterations
  • 8f59d96 [Fix] restore node 0.10 support
  • d2dc5f0 [Fix] check parameters before the "no Promise" bailout
  • b2ad615 v3.1.4
  • 8dbf49b [Deps] update create-hash, ripemd160, sha.js, to-buffer
  • aaf870b [Dev Deps] update @ljharb/eslint-config
  • d15bc35 [meta] update repo URLs
  • See full diff in compare view

Updates react from 19.1.1 to 19.2.0

Release notes

Sourced from react's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Changelog

Sourced from react's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Commits

Updates @types/react from 19.1.10 to 19.2.6

Commits

Updates react-dom from 19.1.1 to 19.2.0

Release notes

Sourced from react-dom's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Commits
  • 8618113 Bump scheduler version (#34671)
  • 1bd1f01 Ship partial-prerendering APIs to Canary (#34633)
  • 2f0649a [Fizz] Remove nonce option from resume-and-prerender APIs (#34664)
  • 5667a41 Bump next prerelease version numbers (#34639)
  • e08f53b Match react-dom/static test entrypoints and published entrypoints (#34599)Description has been truncated

…9 updates

Bumps the minor-and-patch group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.8.2` | `2.10.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.85.3` | `5.90.10` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.85.3` | `5.91.0` |
| [oidc-client-ts](https://github.com/authts/oidc-client-ts) | `3.3.0` | `3.4.1` |
| [pbkdf2](https://github.com/browserify/pbkdf2) | `3.1.3` | `3.1.5` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.1.1` | `19.2.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.10` | `19.2.6` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.1.1` | `19.2.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.7` | `19.2.3` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.8.0` | `7.9.6` |
| [@tanstack/eslint-plugin-query](https://github.com/TanStack/query/tree/HEAD/packages/eslint-plugin-query) | `5.83.1` | `5.91.2` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.7.0` | `6.9.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.20` | `4.17.21` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.2.1` | `24.10.1` |
| [@types/papaparse](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/papaparse) | `5.3.16` | `5.5.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.39.1` | `8.47.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.39.1` | `8.47.0` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.0.1` | `4.2.2` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.0` | `9.2.1` |
| [eslint](https://github.com/eslint/eslint) | `9.33.0` | `9.39.1` |
| [globals](https://github.com/sindresorhus/globals) | `16.3.0` | `16.5.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.5` | `16.2.7` |
| [sass](https://github.com/sass/dart-sass) | `1.90.0` | `1.94.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.39.1` | `8.47.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.5` | `7.2.4` |
| [vite-plugin-node-polyfills](https://github.com/davidmyersdev/vite-plugin-node-polyfills) | `0.22.0` | `0.24.0` |
| [vite-plugin-static-copy](https://github.com/sapphi-red/vite-plugin-static-copy) | `3.1.2` | `3.1.4` |
| [vite-plugin-svgr](https://github.com/pd4d10/vite-plugin-svgr) | `4.3.0` | `4.5.0` |



Updates `@reduxjs/toolkit` from 2.8.2 to 2.10.1
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.8.2...v2.10.1)

Updates `@tanstack/react-query` from 5.85.3 to 5.90.10
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.85.3 to 5.91.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query-devtools)

Updates `oidc-client-ts` from 3.3.0 to 3.4.1
- [Release notes](https://github.com/authts/oidc-client-ts/releases)
- [Commits](authts/oidc-client-ts@v3.3.0...v3.4.1)

Updates `pbkdf2` from 3.1.3 to 3.1.5
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.3...v3.1.5)

Updates `react` from 19.1.1 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react)

Updates `@types/react` from 19.1.10 to 19.2.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.1.1 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react-dom)

Updates `@types/react-dom` from 19.1.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 7.8.0 to 7.9.6
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom)

Updates `@tanstack/eslint-plugin-query` from 5.83.1 to 5.91.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/eslint-plugin-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/eslint-plugin-query)

Updates `@testing-library/jest-dom` from 6.7.0 to 6.9.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.7.0...v6.9.1)

Updates `@types/lodash` from 4.17.20 to 4.17.21
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/node` from 24.2.1 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/papaparse` from 5.3.16 to 5.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/papaparse)

Updates `@types/react` from 19.1.10 to 19.2.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.1.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@typescript-eslint/eslint-plugin` from 8.39.1 to 8.47.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.47.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.39.1 to 8.47.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.47.0/packages/parser)

Updates `@vitejs/plugin-react-swc` from 4.0.1 to 4.2.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/[email protected]/packages/plugin-react-swc)

Updates `concurrently` from 9.2.0 to 9.2.1
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.0...v9.2.1)

Updates `eslint` from 9.33.0 to 9.39.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.33.0...v9.39.1)

Updates `globals` from 16.3.0 to 16.5.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.3.0...v16.5.0)

Updates `lint-staged` from 16.1.5 to 16.2.7
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.1.5...v16.2.7)

Updates `sass` from 1.90.0 to 1.94.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.90.0...1.94.2)

Updates `typescript` from 5.9.2 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.9.2...v5.9.3)

Updates `typescript-eslint` from 8.39.1 to 8.47.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.47.0/packages/typescript-eslint)

Updates `vite` from 7.1.5 to 7.2.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.4/packages/vite)

Updates `vite-plugin-node-polyfills` from 0.22.0 to 0.24.0
- [Release notes](https://github.com/davidmyersdev/vite-plugin-node-polyfills/releases)
- [Commits](davidmyersdev/vite-plugin-node-polyfills@v0.22.0...v0.24.0)

Updates `vite-plugin-static-copy` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/sapphi-red/vite-plugin-static-copy/releases)
- [Changelog](https://github.com/sapphi-red/vite-plugin-static-copy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sapphi-red/vite-plugin-static-copy/compare/[email protected]@3.1.4)

Updates `vite-plugin-svgr` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/pd4d10/vite-plugin-svgr/releases)
- [Commits](pd4d10/vite-plugin-svgr@v4.3.0...v4.5.0)

---
updated-dependencies:
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.90.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oidc-client-ts
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pbkdf2
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-router-dom
  dependency-version: 7.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/eslint-plugin-query"
  dependency-version: 5.91.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 6.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/lodash"
  dependency-version: 4.17.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/papaparse"
  dependency-version: 5.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: concurrently
  dependency-version: 9.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 9.39.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 16.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lint-staged
  dependency-version: 16.2.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.94.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 7.2.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite-plugin-node-polyfills
  dependency-version: 0.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite-plugin-static-copy
  dependency-version: 3.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite-plugin-svgr
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 23, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedreact-router-dom@​7.8.0 ⏵ 7.9.6100 +110065 +398 -1100
Updated@​tanstack/​react-query-devtools@​5.85.3 ⏵ 5.91.0100 +110071 +396 -1100
Updated@​typescript-eslint/​parser@​8.39.1 ⏵ 8.47.01001007198100
Updatedtypescript-eslint@​8.39.1 ⏵ 8.47.0100 +110074 +198 +2100
Updated@​tanstack/​eslint-plugin-query@​5.83.1 ⏵ 5.91.2100 +110074 +393 +2100
Updated@​types/​papaparse@​5.3.16 ⏵ 5.5.0100 +110074 +186 +7100
Updated@​types/​react-dom@​19.1.7 ⏵ 19.2.3100 +110075 +194100
Updated@​types/​react@​19.1.10 ⏵ 19.2.61001007996 +1100
Updated@​types/​lodash@​4.17.20 ⏵ 4.17.2110010080 +190100
Updated@​typescript-eslint/​eslint-plugin@​8.39.1 ⏵ 8.47.099 +110080 +198100
Updatedvite-plugin-node-polyfills@​0.22.0 ⏵ 0.24.0100 +1100100 +180 -1100
Updatedvite-plugin-svgr@​4.3.0 ⏵ 4.5.0100 +110094 +181 +3100
Updated@​types/​node@​24.2.1 ⏵ 24.10.1100 +110081 +195100
Updatedvite@​7.1.5 ⏵ 7.2.498 +1100 +88299 +2100
Updatedreact@​19.1.1 ⏵ 19.2.0100 +110084 +197100
Updatedpbkdf2@​3.1.3 ⏵ 3.1.5100 +110084 +190 +1100
Updatedconcurrently@​9.2.0 ⏵ 9.2.199 +1100100 +184 +2100
Updatedglobals@​16.3.0 ⏵ 16.5.010010085 +192100
Updated@​tanstack/​react-query@​5.85.3 ⏵ 5.90.1099 +110088 +197 +1100
Updatedtypescript@​5.9.2 ⏵ 5.9.310010090 +110090
Updatedvite-plugin-static-copy@​3.1.2 ⏵ 3.1.4100 +11009590 +2100
Updated@​testing-library/​jest-dom@​6.7.0 ⏵ 6.9.1100 +110010091 +1100
Updatedoidc-client-ts@​3.3.0 ⏵ 3.4.1100 +110098 +192 +10100
Updatedreact-dom@​19.1.1 ⏵ 19.2.0100 +110092 +198100
Updatedeslint@​9.33.0 ⏵ 9.39.197 +110010095 -1100
Updated@​reduxjs/​toolkit@​2.8.2 ⏵ 2.10.196100100 +196100
Updatedlint-staged@​16.1.5 ⏵ 16.2.7100 +110010096 +1100
Updatedsass@​1.90.0 ⏵ 1.94.2100 +110010097 +1100
Updated@​vitejs/​plugin-react-swc@​4.0.1 ⏵ 4.2.2100 +110010097 +4100

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 28, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 28, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-and-patch-ef6b7cfec3 branch November 28, 2025 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant