Skip to content

Update frontend dependencies - #72

Merged
JustNZ merged 1 commit into
mainfrom
renovate/frontend-dependencies
Aug 3, 2026
Merged

Update frontend dependencies#72
JustNZ merged 1 commit into
mainfrom
renovate/frontend-dependencies

Conversation

@renovate-bot-justlab

@renovate-bot-justlab renovate-bot-justlab commented Jun 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@heroui/react (source) 3.1.0 → 3.2.3 age confidence
@heroui/styles (source) 3.1.0 → 3.2.3 age confidence
@internationalized/date (source) ^3.12.2 → ^3.12.3 age confidence
@tailwindcss/postcss (source) ^4.3.0 → ^4.3.3 age confidence
@types/node (source) ^25.9.1 → ^25.9.5 age confidence
@types/react (source) ^19.2.15 → ^19.2.18 age confidence
@types/react-dom (source) ^19.2.3 → ^19.2.4 age confidence
eslint-config-next (source) 16.2.6 → 16.2.12 age confidence
framer-motion ^12.40.0 → ^12.43.0 age confidence
jose ^6.2.3 → ^6.2.8 age confidence
lucide-react (source) ^1.17.0 → ^1.28.0 age confidence
next (source) 16.2.11 → 16.2.12 age confidence
next-auth (source) ^4.24.14 → ^4.24.15 age confidence
react (source) 19.2.6 → 19.2.8 age confidence
react-dom (source) 19.2.6 → 19.2.8 age confidence
recharts ^3.8.1 → ^3.10.1 age confidence
tailwindcss (source) ^4.3.0 → ^4.3.3 age confidence

Release Notes

heroui-inc/heroui (@​heroui/react)

v3.2.3

Compare Source

What's Inside
  • 🔽 ComboBox → multiple selection
  • 🌐 RTL → logical CSS properties across all styles
  • 📦 react-aria → moved to peerDependencies, single shared copy
  • 🎨 tailwind-variants 3.3.0
  • 🔧 ScrollShadow, Spinner, InputOTP, Table & Button fixes
What's Changed
Full Release Note

https://heroui.com/docs/react/releases/v3-2-3

Full Changelog: heroui-inc/heroui@v3.2.2...v3.2.3

v3.2.2

Compare Source

What's Inside
  • 📦 React Aria 1.19.0
  • 📑 Tabs → overflow scrolling with chevrons + edge fade
  • ✏️ Input fields → clear/close buttons no longer submit forms
  • ✅ Checkbox, Radio, Switch → overflow scroll fix
  • 🎨 Chip, DatePicker, Autocomplete, Toast → polish fixes
What's Changed
Full Release Note

https://heroui.com/docs/react/releases/v3-2-2

Full Changelog: heroui-inc/heroui@v3.2.1...v3.2.2

v3.2.1

Compare Source

What's Inside
  • 📦 @​heroui/react → no longer bundles its own copy of react-aria
  • 💬 Tooltip → duplicate-instance issues fixed
  • 🔧 SwitchGroup → horizontal layout fix
What's Changed

Full Changelog: heroui-inc/heroui@v3.2.0...v3.2.1

v3.2.0

Compare Source

What's inside
  • React Aria 1.18.0
  • Calendar → week/day views, multi-select, year picker
  • Table → SortableColumnHeader
  • Autocomplete → Virtualizer
  • Tooltip → delay theme vars
  • Toggles → new Field composition
Breaking Changes

Radio, Checkbox, and Switch move to an explicit *.Content composition — *.Control nests inside *.Content, the label is plain text inside *.Content (no nested <Label>), and Description/FieldError become siblings of *.Content.

What's Changed
New Contributors
Full Release Note

https://heroui.com/docs/react/releases/v3-2-0

Full Changelog: heroui-inc/heroui@v3.1.0...v3.2.0

adobe/react-spectrum (@​internationalized/date)

v3.12.3

Compare Source

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

v4.3.2

Compare Source

Fixed
  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#​20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#​20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#​20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#​20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#​20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#​20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#​20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#​20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#​20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#​20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#​20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#​20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#​20289)

v4.3.1

Compare Source

Added
  • Add --silent option to suppress output in @tailwindcss/cli (#​20100)
Fixed
  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#​20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#​20052)
  • Allow @apply to be used with CSS mixins (#​19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#​20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#​20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#​20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#​20027)
  • Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#​20127)
  • Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#​20130)
  • Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#​20137)
  • Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#​20139)
  • Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#​20198)
  • Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#​19588)
  • Allow @variant to be used inside addBase (#​19480)
  • Ensure @source globs with symlinks are preserved (#​20203)
  • Ensure later @source rules can re-include files excluded by earlier @source not rules (#​20203)
  • Upgrade: don't migrate empty class rules to invalid @utility rules (#​20205)
  • Ensure transitions between inset-shadow-none and other inset shadows work correctly (#​20208)
  • Ensure explicitly referenced @source directories are scanned even when ignored by git (#​20214)
  • Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#​20217)
  • Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#​20221)
  • Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#​20228)
Changed
  • Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#​20196)
  • Generate var(--spacing) instead of calc(var(--spacing) * 1) for spacing utilities like m-1 and left-1 (#​20196)
vercel/next.js (eslint-config-next)

v16.2.12

Compare Source

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

Compare Source

This release contains security fixes for the following advisories:

High:

Moderate:

v16.2.10

Compare Source

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Compare Source

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Compare Source

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Backport documentation fixes for v16.2 (#​93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#​93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#​93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#​93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#​93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#​93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#​93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#​94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#​94050)
  • [backport] Propagate adapter preferred regions (#​94200)
  • [16.2.x] Don't drop FormData entries (#​94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#​94284)
Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

motiondivision/motion (framer-motion)

v12.43.0

Compare Source

Added
  • Hardware acceleration for backgroundColor in supported browsers.
  • Hardware acceleration for SVG elements.
Fixed
  • AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.
  • motion: Throw error when passing a custom motion component an incorrect ref type.

v12.42.2

Compare Source

Fixed
  • animateView: Cropped group layers now animate border-radius from the old to new radius.

v12.42.1

Compare Source

Fixed
  • animateView: Old layer fade out now cancelled when defining .new().

v12.42.0

Compare Source

Changed
  • animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.
Fixed
  • animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
  • animateView: Disabled automatic border-radius animation.

v12.41.0

Compare Source

Added
  • animateView: Moves from Motion+ Early Access and alpha to main library.
  • animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.
  • animateView: .new() and .old() configures values to animate on new and old layers.
  • animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.
  • animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.
  • animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.
Fixed
  • AnimatePresence: Prevent stuck exit animations when children interrupt.
  • drag: Child e.stopPropagation() no longer break drag end.
  • Fixing Next.js OOM on Windows when importing via motion package.
  • animateLayout: Improve handling of parallel/interleaved calls.
Changed
  • animateView: .enter() and .exit() now refer specifically to new and old layers where there are no matching old or new layers.
  • animateView: Interrupted transition setups now return resolved animation rather than throwing.
panva/jose (jose)

v6.2.8

Compare Source

Fixes
  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)
Refactor
  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Compare Source

Fixes
  • require own JOSE properties for presence checks (90ab09c)
Refactor

v6.2.6

Compare Source

Fixes
  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Compare Source

Fixes
  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #​879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)
Documentation
  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)
Refactor
  • assert key shape and type from the entry (971057e)
  • avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)
  • correct swapped JWE unprotected header type error messages (894c498)
  • describe each JWS algorithm once (7375028)
  • discriminate a key once (0b59a69)
  • fold single-consumer modules into their consumers (c2f0ca3)
  • generate and import keys from the entry (da69b68)
  • keep JWE out of the JWKS and embedded-JWK paths (241dd48)
  • keep JWS and JWE out of each other's bundles (2a98564)
  • parse a Protected Header in one place (30f72af)
  • resolve the content encryption algorithm once (98b50ab)
  • tighten key property checks (fe0dc3b)
  • types: add discriminated JOSE error types (f7f764e)
  • types: add JOSE identifier unions and JWK narrowing (2a20f49)
  • types: improve key and result inference (cb25e77)
  • types: trim published declaration comments (544f179)
  • unify base64 decode errors (3a91833)
  • validate each token once rather than once per layer (bbdae09)
  • write each algorithm identifier once (73d83b5)

v6.2.4

Compare Source

Documentation
  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)
Refactor
  • normalize JWK export members from runtime quirks (386a3eb)
lucide-icons/lucide (lucide-react)

v1.28.0: Version 1.28.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

v1.27.0: Version 1.27.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

v1.26.0: Version 1.26.0

Compare Source

What's Changed

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "before 5am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-bot-justlab renovate-bot-justlab added the dependencies Pull requests that update a dependency file label Jun 4, 2026
@renovate-bot-justlab
renovate-bot-justlab enabled auto-merge (squash) June 4, 2026 22:03
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 7 times, most recently from f86a2a0 to 256a262 Compare June 12, 2026 18:08
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 5 times, most recently from 3c08db6 to 235184a Compare June 19, 2026 08:11
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 7 times, most recently from e8c7058 to 8103810 Compare June 30, 2026 13:08
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 5 times, most recently from b13e4a6 to b575b68 Compare July 6, 2026 21:09
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 2 times, most recently from 0f1548c to e5bf604 Compare July 9, 2026 14:09
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 2 times, most recently from 7e85b6a to fddad9e Compare July 17, 2026 09:08
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 7 times, most recently from 80955a9 to 7e68e00 Compare July 25, 2026 22:06
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch 10 times, most recently from 2e890ad to fe6607b Compare August 3, 2026 13:16
@renovate-bot-justlab
renovate-bot-justlab force-pushed the renovate/frontend-dependencies branch from fe6607b to c9b38e6 Compare August 3, 2026 14:02
@JustNZ
JustNZ disabled auto-merge August 3, 2026 14:45
@JustNZ
JustNZ merged commit da909bf into main Aug 3, 2026
2 checks passed
@JustNZ
JustNZ deleted the renovate/frontend-dependencies branch August 3, 2026 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot-justlab @JustNZ