Bump the npm-production group across 1 directory with 26 updates

[dependabot]

Bumps the npm-production group with 26 updates in the / directory:

Package	From	To
yaml	2.9.0	2.9.1
@capacitor/browser	8.0.4	8.0.5
@capacitor/core	8.5.2	8.5.3
@capacitor/filesystem	8.1.3	8.1.4
electron	44.4.1	44.7.0
react	19.2.8	19.3.0
react-dom	19.2.8	19.3.0
@citation-js/plugin-csl	0.8.2	0.9.0
@tanstack/react-table	9.2.4	9.2.6
@zip.js/zip.js	2.8.36	2.23.0
dockview-react	8.3.1	8.4.1
@codemirror/commands	6.10.4	6.11.1
@codemirror/language	6.12.4	6.13.1
@codemirror/search	6.7.1	6.7.2
@codemirror/state	6.7.1	6.7.6
@codemirror/view	6.43.8	6.43.14
@lezer/highlight	1.2.3	1.2.5
@readium/navigator	2.8.2	2.11.1
@readium/shared	2.4.0	2.7.0
fast-xml-parser	5.10.1	5.11.2
@embedpdf/engines	2.15.0	2.15.1
@embedpdf/models	2.15.0	2.15.1
@embedpdf/plugin-annotation	2.15.0	2.15.1
@embedpdf/plugin-capture	2.15.0	2.15.1
@embedpdf/plugin-selection	2.15.0	2.15.1
@embedpdf/react-pdf-viewer	2.15.0	2.15.1

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @capacitor/browser from 8.0.4 to 8.0.5

Release notes

Sourced from @​capacitor/browser's releases.

@​capacitor/browser@​8.0.5

8.0.5 (2026-10-02)

Bug Fixes

• browser: only fire browserFinished when the Custom Tab actually terminates (#2561) (5608b1c)

Commits

• 87c0bb8 chore(release): publish [skip ci]
• 0706269 fix(app): silence the String?-to-Any coercion warning in getAppLanguage on iO...
• 03fca06 docs(screen-orientation): fix iOS orientation snippet for UIScene (#2597)
• bf42d23 fix(status-bar): avoid retain cycle between StatusBar and the bridge (#2569)
• 5608b1c fix(browser): only fire browserFinished when the Custom Tab actually terminat...
• ed6cf8f fix(share): present share sheet from the topmost view controller on iOS (#2574)
• fd606de fix(push-notifications): show foreground notification image on Android (#2572)
• 467dafd chore(release): publish [skip ci]
• fa8ddfb fix(share): Add nonce validation to broadcast receiver on Android (#2592)
• 89070d4 chore: migrate local notifications to new repo (#2584)
• Additional commits viewable in compare view

Updates @capacitor/core from 8.5.2 to 8.5.3

Release notes

Sourced from @​capacitor/core's releases.

8.5.3

8.5.3 (2026-10-07)

Bug Fixes

• cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Changelog

Sourced from @​capacitor/core's changelog.

8.5.3 (2026-10-07)

Bug Fixes

• cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Commits

• 06e3e19 Release 8.5.3
• ba28569 chore: add .build/ folder to gitignore (#8640)
• 145560e fix(cli): change Cordova AppDelegate.h imports for SPM (#8618)
• See full diff in compare view

Updates @capacitor/filesystem from 8.1.3 to 8.1.4

Release notes

Sourced from @​capacitor/filesystem's releases.

v8.1.4

8.1.4 (2026-10-02)

Bug Fixes

• contain Directory-scoped paths to their target directory (#91) (40394b7)
• ios: raw file paths without a scheme couldn't be accessed (#84) (74495f5)
• ios: update native lib to latest version (#93) (cb9f6ff)

---

This release is also available on:

• npm package (@​latest dist-tag)

Changelog

Sourced from @​capacitor/filesystem's changelog.

8.1.4 (2026-10-02)

Bug Fixes

• contain Directory-scoped paths to their target directory (#91) (40394b7)
• ios: raw file paths without a scheme couldn't be accessed (#84) (74495f5)
• ios: update native lib to latest version (#93) (cb9f6ff)

Commits

• 4a46c5a chore(release): 8.1.4 [skip ci]
• cb9f6ff fix(ios): update native lib to latest version (#93)
• 40394b7 fix: contain Directory-scoped paths to their target directory (#91)
• 72bab10 chore(android): fix build warnings (#86)
• 74495f5 fix(ios): raw file paths without a scheme couldn't be accessed (#84)
• See full diff in compare view

Updates electron from 44.4.1 to 44.7.0

Release notes

Sourced from electron's releases.

electron v44.7.0

Release Notes for v44.7.0

Features

• The macOS autoUpdater now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. #54204

Fixes

• Fixed an uncatchable TypeError in net.fetch when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. #54672

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. #54666
• Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. #54657

electron v44.6.0

Release Notes for v44.6.0

Features

• Added the experimental protocol.registerSource() to serve a custom scheme from directories on disk without a JavaScript handler. #54522 (Also in 45)

Fixes

• Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. #54596
• Fixed a crash on navigator.usb.requestDevice() in in-memory sessions. #54616 (Also in 45)
• Fixed webview.findInPage() hanging when the host page also has an iframe. #54586 (Also in 43, 45)
• Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. #54623

Documentation

• Documentation changes: #54589

electron v44.5.1

Release Notes for v44.5.1

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn and V8. #54564

electron v44.5.0

Release Notes for v44.5.0

Features

• Added launch-failure reporting with systemErrorCode to the app child-process-gone event. #54231 (Also in 45)

Fixes

... (truncated)

Commits

• 61f55c4 test: bound hidden overlay cold-process runs (#54689)
• a0c11d9 feat: roll Squirrel.Mac for streamed, resumable and delta update downloads (#...
• 44cac48 test: wait for stable focus before checking openExternal removes focus (#54690)
• 505edea test: wait for the webview guest to load before navigating it (#54673)
• fbb54bb test: run WebContentsView focusOnNavigation and shell.openExternal specs seri...
• 06209a5 fix(net): support non-ASCII headers and multiple cookies in net.fetch (#54672)
• 74f6399 chore: cherry-pick 47 changes from angle, chromium, dawn, fontconfig, skia, v...
• 3d7bdb5 test: add mouse-input addon for setIgnoreMouseEvents specs (#54605)
• 0498bc7 chore: cherry-pick 8 changes from angle, chromium, skia, v8 and webrtc (#54657)
• d165ab9 test: listen for both singleton exits before either can happen (#54601)
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063,

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.