Skip to content

build(deps): bump the prod-dependencies group across 1 directory with 9 updates#1192

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-35b50fd881
Open

build(deps): bump the prod-dependencies group across 1 directory with 9 updates#1192
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-35b50fd881

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 9 updates in the / directory:

Package From To
@woocommerce/components 13.1.0 14.1.0
@wordpress/components 33.1.0 36.1.0
@wordpress/element 6.46.0 8.2.0
react 18.3.1 19.2.7
react-dom 18.3.1 19.2.7
@babel/runtime 7.29.7 8.0.0
eslint-config-universe 15.0.4 16.0.0
@atlaskit/pragmatic-drag-and-drop 1.8.1 2.0.1
@atlaskit/pragmatic-drag-and-drop-hitbox 1.2.0 2.0.0

Updates @woocommerce/components from 13.1.0 to 14.1.0

Release notes

Sourced from @​woocommerce/components's releases.

trunk-snapshot

Trunk-snapshot build generated.

Nightly build auto generated.

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​woocommerce/components since your current version.


Updates @wordpress/components from 33.1.0 to 36.1.0

Changelog

Sourced from @​wordpress/components's changelog.

36.1.0 (2026-07-01)

36.0.0 (2026-06-24)

Breaking Changes

  • The __next40pxDefaultSize prop is now true by default. The prop can be safely removed from the following:

Enhancements

  • BaseControl: Apply text-wrap: pretty to help text to avoid typographic widows (#79112).
  • Button, DropdownMenu, FormToggle, Modal, Panel, RadioControl, Toolbar: Migrate hardcoded border and stroke colors to WPDS tokens (#79244).

Bug Fixes

  • SandBox: Fix the viewport-unit (vh, vw, etc.) stripping so user-supplied HTML using these units in width/height no longer triggers a runaway resize loop in the preview (#78677).
  • BoxControl: Respect a consumer-supplied placeholder passed via inputProps, falling back to it when there is no mixed-value placeholder (#79466).

Internal

  • ResizableBox: Make the children prop optional (#79370).
  • Add documentation and lint guardrails for the ongoing Emotion migration (#79442).
  • Divider: Migrate styles from Emotion to SCSS Modules (#79444).
  • Adopt --wpds-dimension-size-* design tokens #79093.
  • Point the legacy --wp-components-* color fallbacks at the design system tokens (--wpds-* / --wp-admin-theme-color*), so component styles get sensible defaults from the prebuilt token stylesheet without a runtime <ThemeProvider> (#78664).
  • withFallbackStyles: Refactor from a class component to a function component with hooks (#78837).

Documentation

  • Menu: Fix overriden typo to overridden in CheckboxItemProps and RadioItemProps. (#79331)
  • Add component documentation for ColorPicker, CustomSelectControl, Navigator, NumberControl, ResizableBox, and Slot components (#79460).

Code Quality

  • Move @types/react from dependencies to an optional peer dependency so consumers' React type version is used #79095.

35.0.1 (2026-06-16)

35.0.0 (2026-06-10)

Breaking Changes

  • Revert React back to v18 #78940.

Documentation

  • Fix documentation typos and grammar (#78686).

... (truncated)

Commits
  • 66c8050 Fix wp/latest release metadata (#79821)
  • d0d1bfc Update changelog files
  • 66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • 74218a2 Update changelog files
  • 504adfc Revert "Update changelog files"
  • b28bd6d Update changelog files
  • ab25f49 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • 8c4f3ca Update changelog files
  • f239b85 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • e2ae8e2 Update changelog files
  • Additional commits viewable in compare view

Updates @wordpress/element from 6.46.0 to 8.2.0

Changelog

Sourced from @​wordpress/element's changelog.

8.2.0 (2026-07-01)

8.1.0 (2026-06-24)

8.0.1 (2026-06-16)

8.0.0 (2026-06-10)

Breaking Changes

  • Revert React back to v18 #78940.

7.0.0 (2026-05-27)

Breaking Changes

  • Updated dependencies to React 19.2.4 (#61521).
  • Removed the render, hydrate and unmountComponentAtNode exports that have been deprecated since WordPress 6.2 after upgrade to React 18 (#61521).

New Features

  • Added new react exports: Activity, use, useActionState, useEffectEvent, and useOptimistic (#61521).
  • Added new react-dom exports: useFormStatus, preconnect, prefetchDNS, preinit, preinitModule, preload, and preloadModule (#61521).
Commits
  • 66c8050 Fix wp/latest release metadata (#79821)
  • d0d1bfc Update changelog files
  • 66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • 74218a2 Update changelog files
  • 504adfc Revert "Update changelog files"
  • b28bd6d Update changelog files
  • ab25f49 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • 8c4f3ca Update changelog files
  • f239b85 Merge changes published in the Gutenberg plugin "release/23.5" branch
  • e2ae8e2 Update changelog files
  • Additional commits viewable in compare view

Updates react from 18.3.1 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

... (truncated)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 18.3.1 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @babel/runtime from 7.29.7 to 8.0.0

Release notes

Sourced from @​babel/runtime's releases.

v8.0.0 (2026-06-16)

NOTE: The changelog below is relative to v8.0.0-rc.6. You can find a summary of all the breaking changes shipped in the Babel 8 release line in the migration guide for users and migration guide for plugin developers.

Read the release blog post at http://babeljs.io/blog/2026/06/16/8.0.0!

👓 Spec Compliance

💥 Breaking Change

  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser

🐛 Bug Fix

  • babel-generator
  • babel-plugin-transform-modules-systemjs

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v8.0.0-rc.6 (2026-05-25)

Re-release all packages with npm provenance attestations

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/runtime's changelog.

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser

🐛 Bug Fix

  • babel-generator
  • babel-plugin-transform-modules-systemjs

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

v8.0.0-rc.6 (2026-05-25)

🐛 Bug Fix

🏠 Internal

  • babel-core
  • babel-compat-data, babel-register
  • babel-helper-transform-fixture-test-runner, babel-node
  • babel-build-external-helpers, babel-cli, babel-generator, babel-helper-fixtures, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-node, babel-parser, babel-plugin-transform-modules-systemjs, babel-types

🔬 Output optimization

... (truncated)

Commits

Updates eslint-config-universe from 15.0.4 to 16.0.0

Changelog

Sourced from eslint-config-universe's changelog.

Changelog

Unpublished

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

💡 Others

15.2.0 — 2026-05-20

This version does not introduce any user-facing changes.

15.1.1 — 2026-05-13

💡 Others

15.1.0 — 2026-05-05

🎉 New features

  • Disabled import/no-named-as-default in both core and TypeScript presets (#45088 by @​hassankhan)
Commits

Updates @atlaskit/pragmatic-drag-and-drop from 1.8.1 to 2.0.1

Commits

Updates @atlaskit/pragmatic-drag-and-drop-hitbox from 1.2.0 to 2.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels Jun 20, 2026
@wcpos-bot

wcpos-bot Bot commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

@coderabbitai full review

PR #1192 fix triage after investigating the failing Merge Gate:

# Source File Class Category Decision Outcome
1 CI / Merge Gate n/a Ambiguous Missing required external check Blocked Merge Gate timed out waiting for a CodeRabbit check/status on 7324d41650f61434f05e476b4cf826f9344fedb4. Smoke Test (Latest Stable) was skipped, but the gate script explicitly allows that for non-PHP diffs. This PR changes only workspace package.json files, has zero unresolved review threads, and has no review-body feedback. I requested a full CodeRabbit review, then rechecked the commit checks/statuses; no CodeRabbit check run or commit status appeared, so rerunning Merge Gate would currently hit the same blocker.

Unresolved inline review-thread inventory: 0 from a fresh GraphQL query.

Skipped threads: none.

No code commit was pushed: the blocker is the missing CodeRabbit status/check, and this PR branch cannot change the currently running Merge Gate policy because .github/workflows/merge-gate.yml checks out trusted scripts from the repository default branch.

@wcpos-bot

wcpos-bot Bot commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

@coderabbitai full review

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-35b50fd881 branch from 7324d41 to 04574cc Compare June 27, 2026 20:44

kilbot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

PR #1192 fix triage after a fresh CI and review-thread inventory.

# Source File Class Category Decision Outcome
1 CI / Merge Gate n/a Ambiguous Missing required external check Blocked / no-op Current head 04574cc has two failed Merge Gate runs (28301289306, 28301289654). Both logs show CodeRabbit and smoke test are required for this PR, repeatedly allow Smoke Test (Latest Stable) as skipped because no PHP-test files changed, then time out on CodeRabbit pending (missing/missing). Commit-level check runs contain no CodeRabbit check, and the commit status API reports total_count: 0, so there is no CodeRabbit status for the gate to observe.

Evidence:

  • Changed files are only workspace package manifests under packages/*/package.json; no PHP-test files changed.
  • .github/scripts/merge-gate.sh allows Smoke Test (Latest Stable) to be skipped when requires_php_tests is false.
  • The Merge Gate workflow checks out trusted scripts from the repository default branch, so this PR branch cannot alter the running gate policy.
  • Fresh unresolved inline review-thread inventory: 0.

Skipped threads: none; the fresh unresolved-thread query is empty.

No code commit was pushed. This is blocked on the repository-side missing CodeRabbit check/status, not on an actionable code or test failure in this PR.

… 9 updates

Bumps the prod-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@woocommerce/components](https://github.com/woocommerce/woocommerce) | `13.1.0` | `14.1.0` |
| [@wordpress/components](https://github.com/WordPress/gutenberg/tree/HEAD/packages/components) | `33.1.0` | `36.1.0` |
| [@wordpress/element](https://github.com/WordPress/gutenberg/tree/HEAD/packages/element) | `6.46.0` | `8.2.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.7` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.7` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.29.7` | `8.0.0` |
| [eslint-config-universe](https://github.com/expo/expo/tree/HEAD/packages/eslint-config-universe) | `15.0.4` | `16.0.0` |
| [@atlaskit/pragmatic-drag-and-drop](https://github.com/atlassian/pragmatic-drag-and-drop) | `1.8.1` | `2.0.1` |
| [@atlaskit/pragmatic-drag-and-drop-hitbox](https://github.com/atlassian/pragmatic-drag-and-drop) | `1.2.0` | `2.0.0` |



Updates `@woocommerce/components` from 13.1.0 to 14.1.0
- [Release notes](https://github.com/woocommerce/woocommerce/releases)
- [Commits](https://github.com/woocommerce/woocommerce/commits)

Updates `@wordpress/components` from 33.1.0 to 36.1.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/components/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/components@36.1.0/packages/components)

Updates `@wordpress/element` from 6.46.0 to 8.2.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/element/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/element@8.2.0/packages/element)

Updates `react` from 18.3.1 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 18.3.1 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@babel/runtime` from 7.29.7 to 8.0.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.0/packages/babel-runtime)

Updates `eslint-config-universe` from 15.0.4 to 16.0.0
- [Changelog](https://github.com/expo/expo/blob/main/packages/eslint-config-universe/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/eslint-config-universe)

Updates `@atlaskit/pragmatic-drag-and-drop` from 1.8.1 to 2.0.1
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

Updates `@atlaskit/pragmatic-drag-and-drop-hitbox` from 1.2.0 to 2.0.0
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

---
updated-dependencies:
- dependency-name: "@atlaskit/pragmatic-drag-and-drop"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: "@atlaskit/pragmatic-drag-and-drop-hitbox"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: "@babel/runtime"
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: "@woocommerce/components"
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: "@wordpress/components"
  dependency-version: 35.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: "@wordpress/element"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: eslint-config-universe
  dependency-version: 15.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-35b50fd881 branch from 04574cc to 74b6e21 Compare July 4, 2026 20:44
@wcpos-bot

wcpos-bot Bot commented Jul 4, 2026

Copy link
Copy Markdown
Contributor

PR #1192 round 2 fix triage after fresh CI and review-thread inventory.

Review-thread scope:

Thread File Issue Decision Commit

Fresh unresolved inline review-thread inventory: 0.

Skipped threads: none; the fresh unresolved-thread query is empty.

CI scope:

Check Issue Decision Evidence Commit
✅ Merge Gate Required gate times out waiting for CodeRabbit on head 74b6e21; Smoke Test (Latest Stable) is skipped, but allowed because no PHP-test files changed. Blocked / no branch-side code fix Current head has two failed Merge Gate runs (28719115422, 28719115804). Both logs repeat CodeRabbit pending (missing/missing) until timeout. Commit status API reports total_count: 0, and commit check-runs contain no CodeRabbit check. The Merge Gate workflow checks out .github/scripts/merge-gate.sh from the repository default branch, so this PR branch cannot change the policy that requires CodeRabbit for this Dependabot npm production-dependency PR. n/a

No code commit was pushed. The remaining blocker is repository-side/external: CodeRabbit did not publish a check/status for this head, and the trusted default-branch Merge Gate script currently requires it for this PR type.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant