chore: bump the npm-all group across 1 directory with 16 updates by dependabot[bot] · Pull Request #74 · alloevil/AgentXRay

dependabot · 2026-10-18T02:47:14Z

Bumps the npm-all group with 16 updates in the /frontend directory:

Package	From	To
@radix-ui/react-checkbox	`1.3.11`	`1.4.1`
@radix-ui/react-dialog	`1.1.23`	`1.3.1`
@radix-ui/react-scroll-area	`1.2.18`	`1.4.0`
@radix-ui/react-select	`2.3.7`	`2.4.1`
@radix-ui/react-separator	`1.1.15`	`1.2.0`
@radix-ui/react-slot	`1.3.3`	`1.5.0`
@radix-ui/react-tabs	`1.1.21`	`1.2.1`
@radix-ui/react-tooltip	`1.2.16`	`1.4.1`
@tanstack/react-query	`5.102.8`	`5.104.2`
@tanstack/react-virtual	`3.14.10`	`3.14.19`
react	`19.2.8`	`19.3.1`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.1`
@types/react-dom	`19.2.7`	`19.3.0`
tailwind-merge	`3.6.0`	`3.7.0`
@types/node	`22.20.1`	`22.20.5`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`

Updates @radix-ui/react-checkbox from 1.3.11 to 1.4.1

Changelog

Sourced from @radix-ui/react-checkbox's changelog.

1.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

1.4.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Fixed bugs in form-nested control components where a user-driven change was treated as programmatic in some cases, preventing bubbled event handlers from being called.

Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-use-controllable-state@1.3.0

1.3.12

Updated dependencies: @radix-ui/react-use-size@1.1.5, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11

Commits

See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.23 to 1.3.1

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.3.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

1.3.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-dismissable-layer@1.2.0, @radix-ui/react-focus-guards@1.2.0, @radix-ui/react-focus-scope@1.3.0, @radix-ui/react-portal@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-slot@1.5.0, @radix-ui/react-use-controllable-state@1.3.0

1.2.0

Added support for multiple aria-describedby attributes.

Fixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped FocusScope reclaimed focus, and its RemoveScroll only allowed scrolling within the modal content.

Updated dependencies: @radix-ui/react-focus-scope@1.2.0, @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-portal@1.1.18

Commits

See full diff in compare view

Updates @radix-ui/react-scroll-area from 1.2.18 to 1.4.0

Changelog

Sourced from @radix-ui/react-scroll-area's changelog.

1.4.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Fixed a bug resulting from incorrect tree-shaking in SWC-minified code.

Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-direction@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-slot@1.5.0, @radix-ui/react-use-callback-ref@1.1.5

1.3.0
Added a ScrollArea.Content part so consumers can own the wrapper element implicitly rendered by ScrollArea.Viewport. Pass disableImplicitContentElement to the viewport and render ScrollArea.Content as its child.
<ScrollArea.Root>
  <ScrollArea.Viewport disableImplicitContentElement>
    <ScrollArea.Content>{children}</ScrollArea.Content>
  </ScrollArea.Viewport>
  <ScrollArea.Scrollbar>
    <ScrollArea.Thumb />
  </ScrollArea.Scrollbar>
</ScrollArea.Root>
In the next major release, the viewport will no longer render this element implicitly. We recommend migrating to this API now for a smoother upgrade.
Fixed a bug where asChild on ScrollArea.Viewport merged props onto the implicit content element instead of the consumer's element.

Updated dependencies: @radix-ui/react-slot@1.4.0, @radix-ui/react-direction@1.1.5, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11

Commits

See full diff in compare view

Updates @radix-ui/react-select from 2.3.7 to 2.4.1

Changelog

Sourced from @radix-ui/react-select's changelog.

2.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

2.4.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Fixed bugs in form-nested control components where a user-driven change was treated as programmatic in some cases, preventing bubbled event handlers from being called.

Fixed content alignment when all items are disabled.

Fixed a bug where updating a Select value programmatically while inside a <form> would dispatch a click event from the hidden bubble select that propagated to ancestor onClick handlers.

Fixed a bug resulting from incorrect tree-shaking in SWC-minified code.

Updated dependencies: @radix-ui/react-collection@1.2.0, @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-direction@1.2.0, @radix-ui/react-dismissable-layer@1.2.0, @radix-ui/react-focus-guards@1.2.0, @radix-ui/react-focus-scope@1.3.0, @radix-ui/react-popper@1.4.0, @radix-ui/react-portal@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-slot@1.5.0, @radix-ui/react-use-controllable-state@1.3.0, @radix-ui/react-use-callback-ref@1.1.5, @radix-ui/react-visually-hidden@1.2.13

2.3.8

Fixed a bug where internal event handlers were still called on disabled Select.Item elements. Consumer-provided event handlers still run, but Radix's own selection logic no longer fires for disabled items.

Updated dependencies: @radix-ui/react-focus-scope@1.2.0, @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-visually-hidden@1.2.12, @radix-ui/react-direction@1.1.5, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-popper@1.3.8, @radix-ui/react-portal@1.1.18, @radix-ui/react-collection@1.1.16

Commits

See full diff in compare view

Updates @radix-ui/react-separator from 1.1.15 to 1.2.0

Changelog

Sourced from @radix-ui/react-separator's changelog.

1.2.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Updated dependencies: @radix-ui/react-primitive@2.2.0

1.1.16

Updated dependencies: @radix-ui/react-primitive@2.1.11

Commits

See full diff in compare view

Updates @radix-ui/react-slot from 1.3.3 to 1.5.0

Changelog

Sourced from @radix-ui/react-slot's changelog.

1.5.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Fixed Slot throwing when an asChild child is a lazy reference whose resolved value is itself a lazy reference.

1.4.0

Added support for multiple aria-describedby attributes.

Fixed compatibility issues with React Server Components.

Commits

See full diff in compare view

Updates @radix-ui/react-tabs from 1.1.21 to 1.2.1

Changelog

Sourced from @radix-ui/react-tabs's changelog.

1.2.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-roving-focus@1.2.1

1.2.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-direction@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-roving-focus@1.2.0, @radix-ui/react-use-controllable-state@1.3.0

1.1.22

Fixed a bug where a focused element inside Tabs.Content did not fire a blur event before the tab switched. Tabs.Trigger now moves focus before the tab's state change.

Updated dependencies: @radix-ui/react-roving-focus@1.1.20, @radix-ui/react-direction@1.1.5, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11

Commits

See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.16 to 1.4.1

Changelog

Sourced from @radix-ui/react-tooltip's changelog.

1.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

1.4.0

Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.

Fixed a bug where tabbing away from a focusable tooltip trigger nested in a modal popover moved focus to the popover's root instead of the next element in the popover.

Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-dismissable-layer@1.2.0, @radix-ui/react-focus-scope@1.3.0, @radix-ui/react-popper@1.4.0, @radix-ui/react-portal@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-slot@1.5.0, @radix-ui/react-use-controllable-state@1.3.0, @radix-ui/react-visually-hidden@1.2.13

1.3.0

Added support for multiple aria-describedby attributes.

Updated dependencies: @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-visually-hidden@1.2.12, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-popper@1.3.8, @radix-ui/react-portal@1.1.18

Commits

See full diff in compare view

Updates @tanstack/react-query from 5.102.8 to 5.104.2

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.104.2

@tanstack/react-query@5.104.2

@tanstack/react-query-next-experimental@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.2

@tanstack/react-query-persist-client@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.104.2

@tanstack/react-query@5.104.2

@tanstack/react-query@5.104.2

Patch Changes

Updated dependencies [03e8c39]:

@tanstack/query-core@5.104.2

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.2

Patch Changes

Updated dependencies [03e8c39]:

@tanstack/query-core@5.104.2

5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

5.104.0

Minor Changes

#11650 5279b05 - Build projects with Vite 8

Patch Changes

Updated dependencies [5279b05]:

@tanstack/query-core@5.104.0

5.103.3

Patch Changes

#11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project

Updated dependencies []:

@tanstack/query-core@5.103.3

5.103.2

Patch Changes

Updated dependencies [8a28904]:

@tanstack/query-core@5.103.2

5.103.1

Patch Changes

Updated dependencies [8330b2f, 3212966]:

@tanstack/query-core@5.103.1

5.103.0

Patch Changes

... (truncated)

Commits

b699b52 ci: Version Packages (#11849)
e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
833062c chore: replace prettier with oxfmt (#11939)
d0cfa6a chore: replace eslint with oxlint (#11938)
0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
b42166e docs(react-query): add JSDoc to the exported interfaces and type aliases (#11...
205d422 docs(*): add missing JSDoc descriptions and enforce 'jsdoc/require-descriptio...
Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.10 to 3.14.19

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.19

Patch Changes

Updated dependencies [269e8ed]:

@tanstack/virtual-core@3.19.4

@tanstack/react-virtual@3.14.18

Patch Changes

Updated dependencies [f211d3a]:

@tanstack/virtual-core@3.19.3

@tanstack/react-virtual@3.14.17

Patch Changes

Updated dependencies [3800fb3, cb510cb]:

@tanstack/virtual-core@3.19.2

@tanstack/react-virtual@3.14.16

Patch Changes

Updated dependencies [7aa34f6, e7a0a92]:

@tanstack/virtual-core@3.19.1

@tanstack/react-virtual@3.14.15

Patch Changes

Updated dependencies [28a2174, 92c697f]:

@tanstack/virtual-core@3.19.0

@tanstack/react-virtual@3.14.14

Patch Changes

#1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

@tanstack/virtual-core@3.18.0

@tanstack/react-virtual@3.14.13

Patch Changes

#1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

Updated dependencies [06d1b6b, 2c0a0ea]:

@tanstack/virtual-core@3.17.11

@tanstack/react-virtual@3.14.12

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.19

Patch Changes

Updated dependencies [269e8ed]:

@tanstack/virtual-core@3.19.4

3.14.18

Patch Changes

Updated dependencies [f211d3a]:

@tanstack/virtual-core@3.19.3

3.14.17

Patch Changes

Updated dependencies [3800fb3, cb510cb]:

@tanstack/virtual-core@3.19.2

3.14.16

Patch Changes

Updated dependencies [7aa34f6, e7a0a92]:

@tanstack/virtual-core@3.19.1

3.14.15

Patch Changes

Updated dependencies [28a2174, 92c697f]:

@tanstack/virtual-core@3.19.0

3.14.14

Patch Changes

#1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

@tanstack/virtual-core@3.18.0

3.14.13

Patch Changes

... (truncated)

Commits

4f9636e ci: Version Packages (#1322)
676a098 ci: Version Packages (#1317)
7c20899 ci: Version Packages (#1315)
cb510cb refactor(virtual-core): describe an in-flight scroll command by one phase (#1...
46f73fb ci: Version Packages (#1312)
6732e00 test(virtual-core): pin the iOS deferral and index-scroll orderings measured ...
84c1502 ci: Version Packages (#1303)
92c697f fix(virtual-core): keep lanes aligned after changing lanes with measureElemen...
259fc1a ci: Version Packages (#1299)
2a631f4 fix(virtual-core): reconcile index scrolls after pending measurements (#1294)
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in ...
Description has been truncated

Bumps the npm-all group with 16 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.11` | `1.4.1` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.23` | `1.3.1` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.18` | `1.4.0` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.7` | `2.4.1` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.15` | `1.2.0` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.5.0` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.21` | `1.2.1` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.4.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.104.2` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.19` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.5` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | Updates `@radix-ui/react-checkbox` from 1.3.11 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox) Updates `@radix-ui/react-dialog` from 1.1.23 to 1.3.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-scroll-area` from 1.2.18 to 1.4.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-select` from 2.3.7 to 2.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-separator` from 1.1.15 to 1.2.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slot` from 1.3.3 to 1.5.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@radix-ui/react-tabs` from 1.1.21 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-tooltip` from 1.2.16 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tanstack/react-query` from 5.102.8 to 5.104.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.2/packages/react-query) Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.19 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.19/packages/react-virtual) Updates `react` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@types/node` from 22.20.1 to 22.20.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) --- updated-dependencies: - dependency-name: "@radix-ui/react-checkbox" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-select" dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-separator" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-slot" dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@tanstack/react-query" dependency-version: 5.104.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-all - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@types/node" dependency-version: 22.20.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-all - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026

alloevil merged commit b25c736 into master Oct 18, 2026
5 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/frontend/npm-all-b6c35fcb11 branch October 18, 2026 03:04

alloevil mentioned this pull request Oct 18, 2026

security: rate-limit every route (express-rate-limit) — fixes CodeQL js/missing-rate-limiting #76

Merged

Navigation Menu

Repository navigation

chore: bump the npm-all group across 1 directory with 16 updates - #74

chore: bump the npm-all group across 1 directory with 16 updates#74
alloevil merged 1 commit into
masterfrom
dependabot/npm_and_yarn/frontend/npm-all-b6c35fcb11

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 18, 2026

1.4.1

1.4.0

1.3.12

1.3.1

1.3.0

1.2.0

1.4.0

1.3.0

2.4.1

2.4.0

2.3.8

1.2.0

1.1.16

1.5.0

1.4.0

1.2.1

1.2.0

1.1.22

1.4.1

1.4.0

1.3.0

@​tanstack/react-query-devtools@​5.104.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.2

Patch Changes

@​tanstack/react-query-persist-client@​5.104.2

Patch Changes

@​tanstack/react-query@​5.104.2

Patch Changes

5.104.2

Patch Changes

5.104.1

Patch Changes

5.104.0

Minor Changes

Patch Changes

5.103.3

Patch Changes

5.103.2

Patch Changes

5.103.1

Patch Changes

5.103.0

Patch Changes

@​tanstack/react-virtual@​3.14.19

Patch Changes

@​tanstack/react-virtual@​3.14.18

Patch Changes

@​tanstack/react-virtual@​3.14.17

Patch Changes

@​tanstack/react-virtual@​3.14.16

Patch Changes

@​tanstack/react-virtual@​3.14.15

Patch Changes

@​tanstack/react-virtual@​3.14.14

Patch Changes

@​tanstack/react-virtual@​3.14.13

Patch Changes

@​tanstack/react-virtual@​3.14.12

Patch Changes

3.14.19

Patch Changes

3.14.18

Patch Changes

3.14.17

Patch Changes

3.14.16

Patch Changes

3.14.15

Patch Changes

3.14.14

Patch Changes

3.14.13

Patch Changes

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

`@tanstack/react-query-devtools@5`.104.2

`@tanstack/react-query-next-experimental@5`.104.2

`@tanstack/react-query-persist-client@5`.104.2

`@tanstack/react-query@5`.104.2

`@tanstack/react-virtual@3`.14.19

`@tanstack/react-virtual@3`.14.18

`@tanstack/react-virtual@3`.14.17

`@tanstack/react-virtual@3`.14.16

`@tanstack/react-virtual@3`.14.15

`@tanstack/react-virtual@3`.14.14

`@tanstack/react-virtual@3`.14.13

`@tanstack/react-virtual@3`.14.12