Skip to content

chore(deps): Update frontend pnpm dependencies#448

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/frontend-frontend-pnpm-dependencies
Open

chore(deps): Update frontend pnpm dependencies#448
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/frontend-frontend-pnpm-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) ^9.39.4^9.39.5 age confidence
@playwright/test (source) ^1.60.0^1.61.1 age confidence
@radix-ui/react-collapsible (source) ^1.1.13^1.1.18 age confidence
@radix-ui/react-dialog (source) ^1.1.16^1.1.21 age confidence
@radix-ui/react-label (source) ^2.1.9^2.1.13 age confidence
@radix-ui/react-popover (source) ^1.1.16^1.1.21 age confidence
@radix-ui/react-scroll-area (source) ^1.2.11^1.2.16 age confidence
@radix-ui/react-separator (source) ^1.1.9^1.1.13 age confidence
@radix-ui/react-slot (source) ^1.2.5^1.3.1 age confidence
@radix-ui/react-tabs (source) ^1.1.14^1.1.19 age confidence
@radix-ui/react-toast (source) ^1.2.16^1.2.21 age confidence
@radix-ui/react-tooltip (source) ^1.2.9^1.2.14 age confidence
@tailwindcss/postcss (source) ^4.3.0^4.3.3 age confidence
@tanstack/react-router (source) ^1.170.15^1.170.18 age confidence
@tanstack/router-plugin (source) ^1.168.18^1.168.23 age confidence
@typescript-eslint/eslint-plugin (source) ^8.61.0^8.65.0 age confidence
@typescript-eslint/parser (source) ^8.61.0^8.65.0 age confidence
eslint (source) ^9.39.4^9.39.5 age confidence
eslint-plugin-react-refresh ^0.5.2^0.5.3 age confidence
pnpm (source) 10.34.1+sha512.b58fbde6dca66a929538021581f648b4570b6ca19b18e7cbd7f2c07a7b24454155388dacdf08f2af3678e88a6d1fe04f9d609df24bf51735a060ea041b374ab710.34.5 age confidence
postcss (source) ^8.5.15^8.5.22 age confidence
prettier (source) ^3.8.4^3.9.6 age confidence
radix-ui (source) ^1.5.0^1.6.5 age confidence
react (source) ^19.2.7^19.2.8 age confidence
react-dom (source) ^19.2.7^19.2.8 age confidence
tailwindcss (source) ^4.3.0^4.3.3 age confidence
vite (source) ^7.3.5^7.3.6 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)
microsoft/playwright (@​playwright/test)

v1.61.1

Compare Source

v1.61.0

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs
Network
Browser and Screencast
  • New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
  • New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
  • The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.
Test runner
  • The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
  • Supported expect.soft.poll(...).
  • New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
  • New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
  • testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
  • New -G command line shorthand for --grep-invert.
🛠️ Other improvements
  • Playwright now supports Ubuntu 26.04.
  • HAR and trace recordings now include WebSocket requests.
Browser Versions
  • Chromium 149.0.7827.55
  • Mozilla Firefox 151.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 149
  • Microsoft Edge 149
radix-ui/primitives (@​radix-ui/react-collapsible)

v1.1.18

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

v1.1.17

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-layout-effect@1.1.2

v1.1.16

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

v1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.14

  • Updated dependencies: @radix-ui/react-primitive@2.1.6
radix-ui/primitives (@​radix-ui/react-dialog)

v1.1.21

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

v1.1.20

  • Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.
  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

v1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

v1.1.17

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12
radix-ui/primitives (@​radix-ui/react-label)

v2.1.13

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/react-primitive@2.1.8

v2.1.12

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v2.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v2.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6
radix-ui/primitives (@​radix-ui/react-popover)

v1.1.21

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-popper@1.3.5, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

v1.1.20

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0

v1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13

v1.1.17

  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12
radix-ui/primitives (@​radix-ui/react-scroll-area)

v1.2.16

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/number@1.1.3, @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-layout-effect@1.1.3

v1.2.15

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/primitive@1.1.6, @radix-ui/number@1.1.2, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2

v1.2.14

  • Fixed --radix-scroll-area-corner-width and --radix-scroll-area-corner-height not resetting to 0 when the corner is removed (eg. when one of the scrollbars is no longer visible). Previously these values would stick around and leave a permanent gap on the remaining scrollbar.
  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

v1.2.13

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.2.12

  • Stabilized the viewport style tag unless the nonce changes.
  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6
radix-ui/primitives (@​radix-ui/react-separator)

v1.1.13

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/react-primitive@2.1.8

v1.1.12

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6
radix-ui/primitives (@​radix-ui/react-slot)

v1.3.1

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4

v1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>("Slot");
radix-ui/primitives (@​radix-ui/react-tabs)

v1.1.19

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-roving-focus@1.1.17, @radix-ui/react-use-controllable-state@1.2.5

v1.1.18

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @&#8203;__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-roving-focus@1.1.16, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

v1.1.17

  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-roving-focus@1.1.15, @radix-ui/react-presence@1.1.7

v1.1.16

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14

v1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-roving-focus@1.1.13
radix-ui/primitives (@​radix-ui/react-toast)

v1.2.21

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-visually-hidden@1.2.9

v1.2.20

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @&#8203;__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Fixed Toast removing non-focused toasts when pressing Escape.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2

v1.2.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12

v1.2.18

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
  • Cleared the close timer on unmount to prevent memory leaks and errors in test environments
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

v1.2.17

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6
radix-ui/primitives (@​radix-ui/react-tooltip)

v1.2.14

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-id@1.1.3, @radix-ui/react-popper@1.3.5, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-visually-hidden@1.2.9

v1.2.13

  • Fixed a bug where Tooltip.Content children were mounted to the DOM twice.
  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @&#8203;__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

v1.2.12

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

v1.2.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

v1.2.10

  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6
tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

v4.3.2

Compare Source

Fixed
  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#​20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#​20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#​20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#​20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#​20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#​20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#​20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#​20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#​20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#​20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#​20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#​20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#​20289)

v4.3.1

Compare Source

Added
  • Add --silent option to suppress output in @tailwindcss/cli (#​20100)
Fixed
  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#​20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#​20052)
  • Allow @apply to be used with CSS mixins (#​19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#​20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#​20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#​20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#​20027)
  • Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)]px-[calc(1rem+0)]) (#​20127)
  • Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px]left-[99999px], not left-24999.75) (#​20130)
  • Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#​20137)
  • Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#​20139)
  • Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#​20198)
  • Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#​19588)
  • Allow @variant to be used inside addBase (#​19480)
  • Ensure @source globs with symlinks are preserved (#​20203)
  • Ensure later @source rules can re-include files excluded by earlier @source not rules (#​20203)
  • Upgrade: don't migrate empty class rules to invalid @utility rules (#​20205)
  • Ensure transitions between inset-shadow-none and other inset shadows work correctly (#​20208)
  • Ensure explicitly referenced @source directories are scanned even when ignored by git (#​20214)
  • Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#​20217)
  • Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)]w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#​20221)
  • Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#​20228)
Changed
  • Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#​20196)
  • Generate var(--spacing) instead of calc(var(--spacing) * 1) for spacing utilities like m-1 and left-1 (#​20196)
TanStack/router (@​tanstack/react-router)

v1.170.18

Compare Source

Patch Changes

v1.170.17

Compare Source

Patch Changes

v1.170.16

Compare Source

Patch Changes
  • #​7595 52db703 - Perf improvement of useMatch and derived hooks when navigating away from previous match

  • #​7575 4a93cff - useMatches can skip useRef for structural sharing during SSR

  • #​7600 f046b06 - Reduce Match rerenders during navigations (PR #​7596)

  • #​7577 689d88e - Reduce bundle size by sharing structuralSharing selector logic

  • #​7627 689c5ab - Silence AbortError in renderRouterToStream, this is normal operation

TanStack/router (@​tanstack/router-plugin)

v1.168.23

Compare Source

Patch Changes
  • #​7855 49f6863 - Preserve React component state during HMR when route components are declared with lowercase function names. The development-only React transforms cover split route component groups and unsplit root route component options, including shell, pending, and error components, without changing production output.

[v1.168.22](https://redirect.github.com/TanStack/router/blob/HEAD/pa

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • "before 8am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Jun 14, 2026
@vercel

vercel Bot commented Jun 14, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
autoglm-gui Ready Ready Preview, Comment Jul 22, 2026 11:31pm

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Jun 14, 2026
@codecov

codecov Bot commented Jun 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.92%. Comparing base (17e23d2) to head (898d857).

@@           Coverage Diff           @@
##             main     #448   +/-   ##
=======================================
  Coverage   82.92%   82.92%           
=======================================
  Files         116      116           
  Lines       12250    12250           
=======================================
  Hits        10158    10158           
  Misses       2092     2092           
Flag Coverage Δ
e2e-backend 33.35% <ø> (ø)
e2e-frontend 0.61% <ø> (ø)
integration 39.10% <ø> (ø)
unit 81.30% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 17e23d2...898d857. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

github-actions Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

🚀 Lint & Format Check Results: ❌ FAILED

What was checked:

  • 🐍 Backend: Ruff linting + formatting
  • 📱 Frontend: ESLint + Prettier + TypeScript types
  • 🔧 Unified: Custom lint script validation

❌ Some checks failed!

How to fix:

  1. Run locally to auto-fix most issues:
uv run python scripts/lint.py
  1. Commit the fixes and push:
git add .
git commit -m "fix: apply lint and format fixes"
git push
  1. The checks will run again automatically.

Individual fix commands:

Backend:

uv run ruff check --fix
uv run ruff format

Frontend:

cd frontend
pnpm lint --fix
pnpm format
cd ..

This is an automated check. For questions, ask in the PR discussion.

@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from eebaed1 to 2f2151d Compare June 15, 2026 12:48
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 2f2151d to d7d8193 Compare June 16, 2026 01:46
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from d7d8193 to 08fed58 Compare June 16, 2026 22:34
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 08fed58 to 0ad58b5 Compare June 19, 2026 02:52

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0ad58b5b48

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json Outdated
"vite": "^7.3.5"
},
"packageManager": "pnpm@10.34.1+sha512.b58fbde6dca66a929538021581f648b4570b6ca19b18e7cbd7f2c07a7b24454155388dacdf08f2af3678e88a6d1fe04f9d609df24bf51735a060ea041b374ab7"
"packageManager": "pnpm@10.34.4+sha512.8768be55200ae3f2226b6527fcca2687e14bc4e5f12d7721a0f25da3df47915177058648db4177baf348120fa0ba2752d8d8d93f6beaf1fe64ae18da8de961af"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin packageManager to an existing pnpm release

When Corepack/pnpm honors this packageManager field (for example the Dockerfile enables Corepack and then runs pnpm install --frozen-lockfile in frontend), it will try to activate pnpm@10.34.4; the published pnpm 10.x release line currently ends at 10.34.3, so this version cannot be resolved and frontend installs/builds fail before dependencies are installed. Pin this to a published version such as 10.34.3, with the matching integrity, or remove the invalid pin.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0c4c8ae0d3

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json
"devDependencies": {
"@eslint/js": "^9.39.4",
"@playwright/test": "^1.60.0",
"@playwright/test": "^1.61.1",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin Playwright to a published stable release

With this specifier and the committed lockfile resolving @playwright/test, playwright, and playwright-core to 1.61.1, fresh pnpm install --frozen-lockfile runs will need to fetch that exact version. I checked the public package indexes/release notes for this update and they list stable 1.61.0 plus 1.61.1-beta-* prereleases, but not a stable 1.61.1, so CI/Docker builds will fail before tests can run. Pin this to the published 1.61.0 release or wait until 1.61.1 is actually available.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 0c4c8ae to b6cf8d0 Compare June 25, 2026 02:40
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from b6cf8d0 to 739f65d Compare June 26, 2026 17:05
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 739f65d to ae59cc1 Compare June 27, 2026 14:37
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from ae59cc1 to 60f6731 Compare June 28, 2026 02:31
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 3d4c4e9 to 44b1eab Compare July 11, 2026 20:46
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 44b1eab to 1d3d950 Compare July 13, 2026 03:03
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 1d3d950 to 2275d1a Compare July 13, 2026 11:49
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 2275d1a to 7ae5968 Compare July 13, 2026 18:51
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 7ae5968 to 47d0b80 Compare July 13, 2026 22:01
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 47d0b80 to 0bcf5d8 Compare July 16, 2026 13:52
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 0bcf5d8 to 07035d4 Compare July 18, 2026 00:38
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 07035d4 to 35da1c5 Compare July 18, 2026 05:58

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 35da1c5de4

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json Outdated
Comment on lines +31 to +33
"@tanstack/react-router": "^1.170.18",
"@tanstack/react-router-devtools": "^1.167.0",
"@tanstack/router-plugin": "^1.168.18",
"@tanstack/router-plugin": "^1.168.22",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin TanStack packages to published releases

In fresh frontend installs that use the committed lockfile, pnpm install --frozen-lockfile has to fetch these exact TanStack tarballs, but the current npm/UNPKG package listings still advertise @tanstack/react-router at 1.170.16 and @tanstack/router-plugin at 1.168.19 rather than the pinned 1.170.18/1.168.22. That makes dependency resolution fail before Vite can build; this is fresh evidence because this diff now pins 1.170.18/1.168.22, not the earlier 1.170.17/1.168.19 pair.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 35da1c5 to 643eba8 Compare July 19, 2026 11:56
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 643eba8 to b8363b3 Compare July 19, 2026 19:31
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from b8363b3 to 20efc89 Compare July 20, 2026 05:05
@renovate
renovate Bot force-pushed the renovate/frontend-frontend-pnpm-dependencies branch from 20efc89 to 0f22dea Compare July 20, 2026 20:16

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0f22dea2a5

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json
Comment on lines +64 to +65
"@typescript-eslint/eslint-plugin": "^8.65.0",
"@typescript-eslint/parser": "^8.65.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin TypeScript ESLint to a published release

In fresh frontend installs that use the committed lockfile, pnpm install --frozen-lockfile has to fetch @typescript-eslint/eslint-plugin@8.65.0 and @typescript-eslint/parser@8.65.0. Fresh evidence for re-raising the earlier TypeScript ESLint dependency issue: the current diff now pins 8.65.0, while the public npm/GitHub release listings and the Renovate release notes in this commit still stop at 8.64.0, so CI/Docker installs fail during dependency resolution before linting or building can run.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 663e003939

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json Outdated
"lucide-react": "^0.577.0",
"next-themes": "^0.4.6",
"postcss": "^8.5.15",
"postcss": "^8.5.21",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin PostCSS to a published release

In fresh frontend installs that use the committed lockfile, pnpm install --frozen-lockfile has to fetch postcss@8.5.21, but the public npm package page currently lists 8.5.20 as the latest published version (https://www.npmjs.com/package/postcss). This means CI/Docker installs will fail during dependency resolution before the frontend can lint or build; pin this back to a published PostCSS version or wait until 8.5.21 is published.

Useful? React with 👍 / 👎.

Comment thread frontend/package.json Outdated
"postcss": "^8.5.21",
"qrcode.react": "^4.2.0",
"radix-ui": "^1.5.0",
"radix-ui": "^1.6.4",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin aggregate Radix to a published release

Fresh evidence for the earlier aggregate Radix dependency issue: this diff now pins radix-ui@1.6.4, while the public npm versions page currently lists 1.6.2 as the latest published radix-ui release (https://www.npmjs.com/package/radix-ui?activeTab=versions). Because the lockfile also records the exact radix-ui@1.6.4 tarball and the app imports from radix-ui, fresh pnpm install --frozen-lockfile runs will fail before lint/build can start.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9378f42cf0

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json
Comment on lines +46 to +47
"react": "^19.2.8",
"react-dom": "^19.2.8",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin React to a published release

With this update, fresh frontend installs have to resolve the exact react@19.2.8 tarball recorded in the lockfile, and react-dom@19.2.8 now peers on react: ^19.2.8; however the current React npm/GitHub release listings still stop at 19.2.7, so pnpm install --frozen-lockfile fails before the frontend can build or lint. Pin React back to a published patch or wait until 19.2.8 is actually available.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 898d85746a

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread frontend/package.json
"@tanstack/react-router": "^1.170.18",
"@tanstack/react-router-devtools": "^1.167.0",
"@tanstack/router-plugin": "^1.168.18",
"@tanstack/router-plugin": "^1.168.23",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin router plugin to a published release

Fresh evidence for the earlier TanStack dependency-resolution concern is that this commit now requires @tanstack/router-plugin@1.168.23 in both package.json and the lockfile, while the npm package page still lists the latest published router-plugin version below that (https://www.npmjs.com/package/%40tanstack/router-plugin?activeTab=versions). Any fresh cd frontend && pnpm install --frozen-lockfile path will stop before the frontend can lint or build, so this needs to be pinned to a published plugin version or deferred until 1.168.23 exists.

Useful? React with 👍 / 👎.

Comment thread frontend/package.json
"radix-ui": "^1.5.0",
"react": "^19.2.7",
"react-dom": "^19.2.7",
"radix-ui": "^1.6.5",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin Radix UI to published versions

This commit now pins radix-ui@1.6.5 in package.json and resolves the same exact tarball in pnpm-lock.yaml, but the public npm page for the aggregate package still shows 1.6.2 as the latest published release (https://www.npmjs.com/package/radix-ui?activeTab=versions). Fresh frontend installs therefore cannot resolve the locked dependency; pin this and the matching Radix primitive bumps back to published releases before merging.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants