Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 17 updates#547

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-31c6f5bbf3
Open

chore(deps): bump the production-dependencies group across 1 directory with 17 updates#547
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-31c6f5bbf3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 17 updates in the / directory:

Package From To
turbo 2.9.14 2.9.16
typescript 5.9.3 6.0.3
@shopify/flash-list 2.0.2 2.3.1
victory-native 41.20.3 41.24.0
@codemirror/autocomplete 6.20.2 6.20.3
@atlaskit/pragmatic-drag-and-drop-hitbox 1.1.0 1.2.0
@tanstack/react-virtual 3.13.26 3.14.2
@uiw/react-json-view 2.0.0-alpha.32 2.0.0-alpha.43
date-fns 4.3.0 4.4.0
react-hook-form 7.76.1 7.77.0
@novu/js 3.16.0 3.17.0
@widgetbot/react-embed 1.11.2 1.11.3
i18next 26.2.0 26.3.1
rxdb 17.2.0 17.3.0
rxdb-premium 17.2.0 17.3.0
axios 1.16.1 1.17.0
dompurify 3.4.5 3.4.8

Updates turbo from 2.9.14 to 2.9.16

Release notes

Sourced from turbo's releases.

Turborepo v2.9.16

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.9.15...v2.9.16

Turborepo v2.9.16-canary.2

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.9.15-canary.7...v2.9.16-canary.2

Turborepo v2.9.15

... (truncated)

Commits

Updates typescript from 5.9.3 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Updates @shopify/flash-list from 2.0.2 to 2.3.1

Release notes

Sourced from @​shopify/flash-list's releases.

v2.3.1

What's Changed

New Contributors

Full Changelog: Shopify/flash-list@v2.3.0...v2.3.1

v2.3.0

What's Changed

Full Changelog: Shopify/flash-list@v2.2.3...v2.3.0

v2.2.3

What's Changed

New Contributors

Full Changelog: Shopify/flash-list@v2.2.2...v2.2.3

v2.2.2

What's Changed

Full Changelog: Shopify/flash-list@v2.2.1...v2.2.2

v2.2.1

What's Changed

... (truncated)

Commits
  • c0339d8 v2.3.1
  • 422dcda fix(scroll): enable maintainVisibleContentPosition for horizontal lists (#2145)
  • 2b8ec28 fix: guard against zero window size in bound detection (#2146)
  • ce349cf chore(ci): use SHOPIFY_GH_ACCESS_TOKEN for agent PRs (#2192)
  • 3835bf1 Add type to export statement to comply with isolatedModules (#1995)
  • a063fce chore(ci): improve agent workflows and skills from run feedback (#2182)
  • a4c31b8 fix(ci): add cd and ./gradlew to allowed tools for fix, bot, and android-bot ...
  • c6037fe fix(ci): triage only triggers when agent-triage label is added by a qualified...
  • a215cd2 fix(ci): triage agent should label only, not comment (#2170)
  • a632e10 fix(ci): correct allowedTools syntax for claude-code-action v1 (#2167)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​shopify/flash-list since your current version.


Updates victory-native from 41.20.3 to 41.24.0

Release notes

Sourced from victory-native's releases.

victory-native@41.24.0

Minor Changes

  • Add HorizontalStackedBar and useHorizontalStackedBarPaths for stacked bar charts inside CartesianChart orientation="horizontal". (#670)

Patch Changes

  • Add orientation-neutral isStart, isEnd, seriesIndex, and datumIndex fields to stacked bar barOptions while preserving existing vertical field aliases. (#670)

victory-native@41.23.0

Minor Changes

  • Add horizontal Cartesian bar chart support through CartesianChart orientation="horizontal" and the new HorizontalBar and HorizontalBarGroup components. (#668)

    Horizontal chart axis formatter types now match the runtime axis roles: xAxis.formatXLabel receives numeric value ticks, while yAxis.formatYLabel receives xKey category values.

victory-native@41.22.0

Minor Changes

  • Assign Cartesian chart mutable actionsRef through React's imperative handle, and allow Reanimated shared-value action refs for worklet custom gestures. (#664)

  • Export bar overlay helpers including useBarWidth, getBarWidth, useCartesianChartContext, and createRoundedRectPath. (#664)

  • Export and provide useCartesianTransformContext so chart children can read the current transform scale and translation. (#664)

  • Add chartPressConfig.pan.simultaneousWithExternalGesture for running chart press gestures simultaneously with external gesture refs such as parent scroll views. (#664)

  • Support newline-delimited multiline labels for Cartesian x and y axes. (#664)

  • Add transform pan activation and failure offset options so chart panning can coordinate with parent scroll gestures. (#664)

Patch Changes

  • Keep Cartesian y scales finite when every value for a y key is missing. (#664)

  • Cap rounded Cartesian bar corner radii to half of the rendered bar width. (#664)

  • Bridge Cartesian chart context into the Skia canvas to avoid multiple-renderer context provider warnings. (#664)

  • Apply explicit zero values in chartPressConfig.pan and wire Y-axis pan offsets to the matching gesture methods. (#664)

  • Limit downsampled explicit axis tickValues to the requested tickCount. (#664)

  • Avoid reserving Cartesian x-axis label space when x-label formatting intentionally returns empty labels. (#664)

  • Avoid reserving Cartesian y-axis label offset space when y-label formatting intentionally returns empty labels. (#664)

  • Preserve explicit empty y-axis labels during Cartesian layout measurement so hidden labels do not reserve y-axis space. (#664)

  • Respect explicit barWidth={0} on Cartesian bar groups. (#664)

... (truncated)

Changelog

Sourced from victory-native's changelog.

41.24.0

Minor Changes

  • Add HorizontalStackedBar and useHorizontalStackedBarPaths for stacked bar charts inside CartesianChart orientation="horizontal". (#670)

Patch Changes

  • Add orientation-neutral isStart, isEnd, seriesIndex, and datumIndex fields to stacked bar barOptions while preserving existing vertical field aliases. (#670)

41.23.0

Minor Changes

  • Add horizontal Cartesian bar chart support through CartesianChart orientation="horizontal" and the new HorizontalBar and HorizontalBarGroup components. (#668)

    Horizontal chart axis formatter types now match the runtime axis roles: xAxis.formatXLabel receives numeric value ticks, while yAxis.formatYLabel receives xKey category values.

41.22.0

Minor Changes

  • Assign Cartesian chart mutable actionsRef through React's imperative handle, and allow Reanimated shared-value action refs for worklet custom gestures. (#664)

  • Export bar overlay helpers including useBarWidth, getBarWidth, useCartesianChartContext, and createRoundedRectPath. (#664)

  • Export and provide useCartesianTransformContext so chart children can read the current transform scale and translation. (#664)

  • Add chartPressConfig.pan.simultaneousWithExternalGesture for running chart press gestures simultaneously with external gesture refs such as parent scroll views. (#664)

  • Support newline-delimited multiline labels for Cartesian x and y axes. (#664)

  • Add transform pan activation and failure offset options so chart panning can coordinate with parent scroll gestures. (#664)

Patch Changes

  • Keep Cartesian y scales finite when every value for a y key is missing. (#664)

  • Cap rounded Cartesian bar corner radii to half of the rendered bar width. (#664)

  • Bridge Cartesian chart context into the Skia canvas to avoid multiple-renderer context provider warnings. (#664)

  • Apply explicit zero values in chartPressConfig.pan and wire Y-axis pan offsets to the matching gesture methods. (#664)

  • Limit downsampled explicit axis tickValues to the requested tickCount. (#664)

  • Avoid reserving Cartesian x-axis label space when x-label formatting intentionally returns empty labels. (#664)

  • Avoid reserving Cartesian y-axis label offset space when y-label formatting intentionally returns empty labels. (#664)

... (truncated)

Commits

Updates @codemirror/autocomplete from 6.20.2 to 6.20.3

Commits

Updates @atlaskit/pragmatic-drag-and-drop-hitbox from 1.1.0 to 1.2.0

Commits

Updates @tanstack/react-virtual from 3.13.26 to 3.14.2

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.2

Patch Changes

@​tanstack/react-virtual@​3.14.1

Patch Changes

  • Updated dependencies [c746841]:
    • @​tanstack/virtual-core@​3.16.1

@​tanstack/react-virtual@​3.14.0

Minor Changes

  • Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)
Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.2

Patch Changes

3.14.1

Patch Changes

  • Updated dependencies [c746841]:
    • @​tanstack/virtual-core@​3.16.1

3.14.0

Minor Changes

  • Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)
Commits
  • b983b21 ci: Version Packages (#1184)
  • fbf3bdb feat(virtual-core): add useCachedMeasurements option to preserve sizes when...
  • 13dec39 docs: add directDomUpdates and directDomUpdatesMode options (#1185)
  • c33902f ci: Version Packages (#1182)
  • d789c6e ci: Version Packages (#1181)
  • 73e115d feat(react-virtual): add directDomUpdates for re-render-free scroll positioni...
  • See full diff in compare view

Updates @uiw/react-json-view from 2.0.0-alpha.32 to 2.0.0-alpha.43

Release notes

Sourced from @​uiw/react-json-view's releases.

v2.0.0-alpha.43

Buy me a coffee

Documentation v2.0.0-alpha.43: https://raw.githack.com/uiwjs/react-json-view/76eb2dc/index.html
Or Doc Website: https://htmlpreview.github.io/?https://github.com/uiwjs/react-json-view/76eb2dc/index.html
Comparing Changes: uiwjs/react-json-view@v2.0.0-alpha.42...v2.0.0-alpha.43

npm i @uiw/react-json-view@2.0.0

v2.0.0-alpha.42

Buy me a coffee

Documentation v2.0.0-alpha.42: https://raw.githack.com/uiwjs/react-json-view/869d5fd/index.html
Or Doc Website: https://htmlpreview.github.io/?https://github.com/uiwjs/react-json-view/869d5fd/index.html
Comparing Changes: uiwjs/react-json-view@v2.0.0-alpha.42...v2.0.0-alpha.42

npm i @uiw/react-json-view@

v2.0.0-alpha.41

Buy me a coffee

Documentation v2.0.0-alpha.41: https://raw.githack.com/uiwjs/react-json-view/b38d704/index.html
Or Doc Website: https://htmlpreview.github.io/?https://github.com/uiwjs/react-json-view/b38d704/index.html
Comparing Changes: uiwjs/react-json-view@v2.0.0-alpha.40...v2.0.0-alpha.41

npm i @uiw/react-json-view@2.0.0-alpha.41

v2.0.0-alpha.40

... (truncated)

Commits
  • 30b9760 released v2.0.0-alpha.43
  • 72cc78b doc: update README.md
  • aa60beb released v2.0.0-alpha.42 #91
  • 4566723 fix: null, undefined, NaN not rendering when displayDataTypes=false. fixed #91
  • 28647f4 doc: update README.md
  • 0a11e7c doc: Update README.md
  • 3031569 chore: update funding.
  • 9a5e6dd feat: add named exports for improved import flexibility and organization
  • d098890 chore: update README.md
  • ceda89b doc: update document.
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​uiw/react-json-view since your current version.


Updates date-fns from 4.3.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • See full diff in compare view

Updates react-hook-form from 7.76.1 to 7.77.0

Release notes

Sourced from react-hook-form's releases.

Version 7.77.0

🥡 feat: add resetDefaultValues API (#13427)

https://react-hook-form.com/docs/useform/resetdefaultvalues

const { resetDefaultValues } = useForm();
resetDefaultValues(currentValues);

🐚 harden get() against prototype-path traversal (proto / constructor / prototype) (#13479) 🐞 fix FieldArray errors overriding nested fields (#13476) 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#13473) 🐞 fix: preserve values with shouldUnregister (#13464) 🐞 fix stale isDirty in subscribe payload after reset(..., { keepValues: true }) (#13461) 👝 save bundle size (#13468)

thanks to @​puneetdixit200 & @​dfedoryshchev

Changelog

Sourced from react-hook-form's changelog.

[7.77.0] - 2026-05-31

Added

  • resetDefaultValues API

Fixed

  • Stale isDirty in subscribe payload after reset(..., { keepValues: true })
  • Preserve values with shouldUnregister
  • Inconsistent reset({}) behavior requiring double-call to take effect
  • FieldArray errors overriding nested fields

Security

  • Harden get() against prototype-path traversal (__proto__ / constructor / prototype)

Performance

  • Bundle size reduction
Commits
  • 5b20741 7.77.0
  • f1a02d3 🧪 add regression coverage for createFormControl + useController remount defau...
  • ba88c3d 📚 docs: fix JSDoc for UseFormWatch (#13486)
  • 54198d9 🥡 feat: add resetDefaultValues API (#13427)
  • fe8276e 📚 docs: fix duplicate "de" in es-ES README image alt text (#13481)
  • 6aa81f9 🐚 harden get() against prototype-path traversal (__proto__ / `constructor...
  • 645478b 🐞 fix FieldArray errors overriding nested fields (#13476)
  • 889c752 🧪 add regression coverage for dynamic nested names with useController and wat...
  • 581321c 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...
  • f8eb2d7 🌭 upgrade deps (#13470)
  • Additional commits viewable in compare view

Updates @novu/js from 3.16.0 to 3.17.0

Release notes

Sourced from @​novu/js's releases.

@​novu/js@​v3.17.0

🚀 Features

  • nextjs: fix keyless mode dev env fixes NV-7779 (#11248)
  • shared: OR/AND filtering for data in inbox useNotifications fixes NV-7666 (#11135)
  • js: add PartySocket hibernation heartbeat fixes NV-7445 (#10925)
  • js,react,api-service: implement MS Teams connect and link-user components (#10870)

🩹 Fixes

  • js: scope default connectionIdentifier to subscriberId to prevent 409 conflicts (#10896)

❤️ Thank You

Commits
  • 523044d 🚀 Release v3.17.0 - @​novu/js,@​novu/react,@​novu/nextjs,@​novu/react-native (#11...
  • d9fffb3 chore(api, worker, ws, dashboard): changes required for new release and bug f...
  • cf6aabe feat(api-service): Slack MCP setup cards and tool approval UX fixes NV-7836 (...
  • 862d5f0 fix(api-service): provider-managed setup card redirect and per-subscriber vau...
  • 399b82c feat(dashboard): add Share feedback button to Connect sidebar fixes NV-7941 (...
  • 2f34116 fix(dashboard): alias CLI anonymous id for Connect funnel fixes NV-7938 (#11396)
  • 4cd1230 fix(dashbord,api-service): managed agents create integration form behaviour a...
  • 76c3ee4 fix(api-service): use DASHBOARD_URL for Slack MCP icon URLs fixes NV-7921 (#1...
  • 4464829 chore(dashboard): remove .npmrc copy from Dockerfile (#11395)
  • 07de897 feat(root): update readme (#11383)
  • Additional commits viewable in compare view

Updates @widgetbot/react-embed from 1.11.2 to 1.11.3

Release notes

Sourced from @​widgetbot/react-embed's releases.

v1.11.3

Full Changelog: widgetbot-io/react-embed@v1.11.2...v1.11.3

Commits

Updates i18next from 26.2.0 to 26.3.1

Release notes

Sourced from i18next's releases.

v26.3.1

  • fix(types): t() with a keyPrefix no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the [Res] extends [never] guards added to KeysBuilderWithReturnObjects / KeysBuilderWithoutReturnObjects turned the builders into deferred conditional types, so KeyPrefix<Ns> stopped resolving to a literal union and keyPrefix inference widened to the whole namespace. Symptom: useTranslation(ns, { keyPrefix: 'a.b' }) then t('title') would resolve to '<a.b>.title' | '<other.path>.title' | ... instead of just the scoped value. Affected every react-i18next user using keyPrefix. Restored to the eager 26.2.0 form. The same-namespace conflict handling from #2434 still works via _DropConflictKeys at the merge layer (in options.d.ts). Thanks @​aaronrosenthal (#2436).

v26.3.0

  • feat(types): introduce ResourceNamespaceMap — a separate mergeable augmentation surface for namespace resource types, designed for monorepos where multiple packages each want to contribute their own namespaces. Previously, every package had to coordinate on a single CustomTypeOptions.resources declaration (or fall back to typing dependency namespaces as any) because resources is a single property of an interface and TypeScript reports TS2717 when two declarations of the same property disagree. The new interface merges naturally across declare module 'i18next' blocks, so each package can ship its own i18next.d.ts independently. Per-property merge handles same-namespace contributions from multiple packages, and same-key/different-literal conflicts are silently dropped to avoid poisoning t() overload resolution. Fully backwards-compatible — existing CustomTypeOptions.resources augmentations continue to work, and both surfaces can coexist. Scalar options (defaultNS, returnNull, enableSelector, etc.) still belong on CustomTypeOptions. Thanks

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 3, 2026
…y with 17 updates

Bumps the production-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.9.16` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |
| [@shopify/flash-list](https://github.com/Shopify/flash-list) | `2.0.2` | `2.3.1` |
| [victory-native](https://github.com/FormidableLabs/victory-native-xl/tree/HEAD/lib) | `41.20.3` | `41.24.0` |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.2` | `6.20.3` |
| [@atlaskit/pragmatic-drag-and-drop-hitbox](https://github.com/atlassian/pragmatic-drag-and-drop) | `1.1.0` | `1.2.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.26` | `3.14.2` |
| [@uiw/react-json-view](https://github.com/uiwjs/react-json-view) | `2.0.0-alpha.32` | `2.0.0-alpha.43` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.3.0` | `4.4.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.76.1` | `7.77.0` |
| [@novu/js](https://github.com/novuhq/novu) | `3.16.0` | `3.17.0` |
| [@widgetbot/react-embed](https://github.com/widgetbot-io/react-embed) | `1.11.2` | `1.11.3` |
| [i18next](https://github.com/i18next/i18next) | `26.2.0` | `26.3.1` |
| [rxdb](https://github.com/pubkey/rxdb) | `17.2.0` | `17.3.0` |
| [rxdb-premium](https://github.com/pubkey/rxdb) | `17.2.0` | `17.3.0` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.17.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.5` | `3.4.8` |



Updates `turbo` from 2.9.14 to 2.9.16
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.14...v2.9.16)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `@shopify/flash-list` from 2.0.2 to 2.3.1
- [Release notes](https://github.com/Shopify/flash-list/releases)
- [Changelog](https://github.com/Shopify/flash-list/blob/main/CHANGELOG.md)
- [Commits](Shopify/flash-list@v2.0.2...v2.3.1)

Updates `victory-native` from 41.20.3 to 41.24.0
- [Release notes](https://github.com/FormidableLabs/victory-native-xl/releases)
- [Changelog](https://github.com/FormidableLabs/victory-native-xl/blob/main/lib/CHANGELOG.md)
- [Commits](https://github.com/FormidableLabs/victory-native-xl/commits/victory-native@41.24.0/lib)

Updates `@codemirror/autocomplete` from 6.20.2 to 6.20.3
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@atlaskit/pragmatic-drag-and-drop-hitbox` from 1.1.0 to 1.2.0
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

Updates `@tanstack/react-virtual` from 3.13.26 to 3.14.2
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.2/packages/react-virtual)

Updates `@uiw/react-json-view` from 2.0.0-alpha.32 to 2.0.0-alpha.43
- [Release notes](https://github.com/uiwjs/react-json-view/releases)
- [Commits](uiwjs/react-json-view@v2.0.0-alpha.32...v2.0.0-alpha.43)

Updates `date-fns` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.3.0...v4.4.0)

Updates `react-hook-form` from 7.76.1 to 7.77.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.76.1...v7.77.0)

Updates `@novu/js` from 3.16.0 to 3.17.0
- [Release notes](https://github.com/novuhq/novu/releases)
- [Commits](https://github.com/novuhq/novu/compare/@novu/js@v3.16.0...@novu/js@v3.17.0)

Updates `@widgetbot/react-embed` from 1.11.2 to 1.11.3
- [Release notes](https://github.com/widgetbot-io/react-embed/releases)
- [Commits](widgetbot-io/react-embed@v1.11.2...v1.11.3)

Updates `i18next` from 26.2.0 to 26.3.1
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.2.0...v26.3.1)

Updates `rxdb` from 17.2.0 to 17.3.0
- [Release notes](https://github.com/pubkey/rxdb/releases)
- [Changelog](https://github.com/pubkey/rxdb/blob/master/CHANGELOG.md)
- [Commits](pubkey/rxdb@17.2.0...17.3.0)

Updates `rxdb-premium` from 17.2.0 to 17.3.0
- [Release notes](https://github.com/pubkey/rxdb/releases)
- [Changelog](https://github.com/pubkey/rxdb/blob/master/CHANGELOG.md)
- [Commits](pubkey/rxdb@17.2.0...17.3.0)

Updates `axios` from 1.16.1 to 1.17.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.17.0)

Updates `dompurify` from 3.4.5 to 3.4.8
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.5...3.4.8)

---
updated-dependencies:
- dependency-name: "@atlaskit/pragmatic-drag-and-drop-hitbox"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@novu/js"
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@shopify/flash-list"
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@uiw/react-json-view"
  dependency-version: 2.0.0-alpha.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@widgetbot/react-embed"
  dependency-version: 1.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: i18next
  dependency-version: 26.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: rxdb
  dependency-version: 17.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: rxdb-premium
  dependency-version: 17.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: turbo
  dependency-version: 2.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: victory-native
  dependency-version: 41.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-31c6f5bbf3 branch from 0dec066 to cb22e44 Compare June 3, 2026 19:49
@wcpos-bot

wcpos-bot Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Triage plan before fixes:

# Source File Class Category Decision Outcome
1 CI tsconfig.json Mechanical TypeScript 6 compatibility Fix Add the TS 6 deprecation acknowledgement required for inherited baseUrl.
2 CI .github/workflows/test.yml Mechanical Merge gate Skip Merge Gate is failing only because the required lint/typecheck job failed; it should recover after row 1 passes.

kilbot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Fix summary for PR #547:

Thread File Issue Decision Commit
CI: 🧹 Lint tsconfig.json TypeScript 6 rejects the inherited deprecated baseUrl option unless the deprecation is explicitly acknowledged. Fixed 5834d7a
CI: 🧹 Lint virtualized-list.web.tsx The @tanstack/react-virtual bump changed the wrapper return type shape, and the web item context was missing horizontal. Fixed 5834d7a
CI: 🧹 Lint / validation tsconfig.json TypeScript 6 plus ts-jest needed explicit package roots and Jest/Node ambient types in affected package configs. Fixed 5834d7a
CI: 🧹 Lint / validation jest.config.js Root Jest execution resolved bare ts-jest config paths from the repo root after the dependency bump. Fixed 5834d7a
CI: ✅ Merge Gate package.json Merge Gate was cascading from the lint failure. No direct code change; should recover when checks pass 5834d7a

No unresolved review threads were present, so there were no conversations to resolve.

Local validation:

  • pnpm install --ignore-scripts passed. Plain pnpm install is blocked locally without the private RXDB_PREMIUM token required by rxdb-premium postinstall.
  • pnpm typecheck passed.
  • pnpm test:ci passed.
  • git diff --check passed.
  • pnpm lint was re-run locally, but the sandbox killed @wcpos/core:lint with exit 137 after other packages completed with warnings only; the original CI lint failure was the TypeScript 6 baseUrl error fixed in this commit.

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

📊 Test Coverage Report

Package Statements Branches Functions Lines
@wcpos/core 🔴 21.5% 🔴 24.1% 🔴 20.3% 🔴 21.0%
@wcpos/components 🔴 18.0% 🔴 23.4% 🔴 11.8% 🔴 17.6%
@wcpos/database 🟡 60.2% 🔴 55.0% 🟡 62.7% 🔴 59.7%
@wcpos/hooks 🔴 52.4% 🔴 50.1% 🔴 45.0% 🔴 52.4%
@wcpos/utils 🔴 55.9% 🟡 61.5% 🟡 71.4% 🔴 53.8%
@wcpos/query 🟢 83.0% 🟡 75.0% 🟡 77.0% 🟢 83.2%
Average 🔴 48.5% 🔴 48.2% 🔴 48.0% 🔴 48.0%
Coverage Legend
  • 🟢 Good (≥80%)
  • 🟡 Moderate (60-79%)
  • 🔴 Needs improvement (<60%)
  • ⚪ No coverage data
--- 🤖 Updated by GitHub Actions • [View full report](https://github.com/wcpos/monorepo/actions/runs/26912708856)

kilbot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Fix triage for PR #547:

Thread File Issue Decision Commit
🧹 Lint / Typecheck tsconfig.json TypeScript 6 reported the inherited baseUrl deprecation during typecheck. Added the TS 6 deprecation acknowledgement and package-level root/type config needed by the bumped compiler. 5834d7a
🧹 Lint / Typecheck virtualized-list.web.tsx @tanstack/react-virtual 3.14 changed the virtualizer return type shape. Typed the context from useVirtualWrapper() and included the required horizontal field. 5834d7a
Validation / Unit Tests jest.config.js ts-jest resolved relative package tsconfig paths from the wrong working directory under the updated toolchain. Anchored package Jest tsconfig paths to <rootDir>. 5834d7a
✅ Merge Gate tsconfig.json Merge Gate failed because downstream required jobs were failing. Downstream 🧹 Lint, 🧪 Unit Tests, and ✅ Merge Gate are now green on 5834d7a. 5834d7a

Skipped threads:

Thread Reason for skipping
Review threads None present.

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

🚀 Deployment Summary

Item Status
Preview URL https://wcpos--empv3059d2.expo.app
E2E Tests ✅ Passed
Commit 6843cb3

🔗 Quick Links


🤖 Updated by GitHub Actions

kilbot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Fix summary for PR #547.

Thread File Issue Decision Commit
CI: 🧹 Lint package.json Lint/typecheck failed after the dependency bump. Fixed on the PR branch before my final commit; revalidated green on the latest Test workflow. 5834d7a
CI: ✅ Merge Gate package.json Merge Gate failed because required Test jobs were failing. Revalidated green on the latest Test workflow after branch fixes. 5834d7a
CI: 🎭 Deploy E2E opfs.worker.js The deployed app stayed blank and E2E global setup timed out after the RxDB 17.3 bump while the static OPFS worker still contained RxDB 17.2. Aligned the static OPFS worker with RxDB 17.3; Deploy and all 6 E2E shards are now green. b9dedb3
Thread Reason for skipping
None No unresolved review threads and no submitted review-body feedback.

Validation:

  • Local: git diff --check, pnpm typecheck, pnpm lint, pnpm test:ci
  • GitHub latest commit b9dedb3: Dependency Review, 🧹 Lint, 🧪 Unit Tests, ✅ Merge Gate, Deploy, and all six E2E shards succeeded.

@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

3 similar comments
@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github

dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant