[dependabot]

Bumps the npm-dependencies group with 31 updates in the / directory:

Package	From	To
@carbon/styles	1.115.0	1.117.0
@patternfly/react-core	6.5.1	6.7.0
@patternfly/react-icons	6.5.1	6.7.0
@patternfly/react-styles	6.5.1	6.7.0
@uiw/react-codemirror	4.25.10	4.25.12
file-selector	2.1.2	5.0.1
immer	11.1.8	11.1.21
jsdom	29.1.1	30.1.3
@types/jsdom	28.0.3	30.0.0
react	19.2.7	19.3.1
@types/react	19.2.17	19.3.0
react-dom	19.2.7	19.3.1
@types/react-dom	19.2.3	19.3.0
zustand	5.0.14	5.0.15
@antfu/eslint-config	9.1.0	9.5.1
@eslint-react/eslint-plugin	5.10.0	5.27.2
@playwright/test	1.61.1	1.64.1
@rolldown/plugin-babel	0.2.3	0.2.4
@types/css-tree	2.3.11	3.2.0
@types/jsdom	28.0.3	30.0.0
@types/node	26.0.1	26.6.5
@types/react	19.2.17	19.3.0
@types/react-dom	19.2.3	19.3.0
@vitejs/plugin-react	6.0.3	6.1.2
eslint	10.6.0	10.12.0
eslint-plugin-react-refresh	0.5.3	0.5.7
prettier	3.9.1	3.9.10
sass	1.104.0	1.105.1
testcontainers	12.0.4	12.2.1
tsup	8.5.1	9.0.0
tsx	4.22.4	4.23.15
typescript	6.0.3	7.0.2
vite	8.1.0	8.3.4
vitest	4.1.11	5.0.5

Updates @carbon/styles from 1.115.0 to 1.117.0

Commits

• See full diff in compare view

Updates @patternfly/react-core from 6.5.1 to 6.7.0

Commits

• 371c441 chore(release): releasing packages [ci skip]
• b97ae46 Update promote.sh to enable npm publishing
• 5eb2df2 chore(release): releasing packages [ci skip]
• 47ab4ba docs(misc): mark docked nav demos as beta (#12673)
• e72793a chore(release): releasing packages [ci skip]
• 53a0b83 fix(MenuToggle): allow direct string boolean for aria-haspopup (#12671)
• 831257a chore(release): releasing packages [ci skip]
• e12feae chore: update patternfly package to latest (#12668)
• 59fa2ce chore(release): releasing packages [ci skip]
• 58577a8 feat(toolbar): container query support (#12662)
• Additional commits viewable in compare view

Updates @patternfly/react-icons from 6.5.1 to 6.7.0

Commits

• 371c441 chore(release): releasing packages [ci skip]
• b97ae46 Update promote.sh to enable npm publishing
• 5eb2df2 chore(release): releasing packages [ci skip]
• 47ab4ba docs(misc): mark docked nav demos as beta (#12673)
• e72793a chore(release): releasing packages [ci skip]
• 53a0b83 fix(MenuToggle): allow direct string boolean for aria-haspopup (#12671)
• 831257a chore(release): releasing packages [ci skip]
• e12feae chore: update patternfly package to latest (#12668)
• 59fa2ce chore(release): releasing packages [ci skip]
• 58577a8 feat(toolbar): container query support (#12662)
• Additional commits viewable in compare view

Updates @patternfly/react-styles from 6.5.1 to 6.7.0

Updates @uiw/react-codemirror from 4.25.10 to 4.25.12

Release notes

Sourced from @​uiw/react-codemirror's releases.

v4.25.12

Documentation v4.25.12: https://raw.githack.com/uiwjs/react-codemirror/5d05e26/index.html
Comparing Changes: uiwjs/react-codemirror@v4.25.11...v4.25.12

npm i @uiw/react-codemirror@4.25.12

• 🐞 fix(themes): declare generated runtime dependencies (#771) c0be46f @​dahukish
• 🌍 website: fix type error. #771 #755 2be57f0 @​jaywcjlove
• 🐞 fix: fix tsconfig issue. f4fa3e1 @​jaywcjlove

v4.25.11

Documentation v4.25.11: https://raw.githack.com/uiwjs/react-codemirror/22c79da/index.html
Comparing Changes: uiwjs/react-codemirror@v4.25.10...v4.25.11

npm i @uiw/react-codemirror@4.25.11

• 📖 doc: Update README.md 0b71006 @​jaywcjlove
• 📖 doc: Update README.md e275fb6 @​jaywcjlove
• 🐞 fix: prevent memory leak on default theme recreation (#769) bc982aa @​zukmkv

Commits

• 1e2e11f released v4.25.12 #771 #755
• f4fa3e1 fix: fix tsconfig issue.
• 2be57f0 website: fix type error. #771 #755
• c0be46f fix(themes): declare generated runtime dependencies (#771)
• 990500a released v4.25.11 #769
• bc982aa fix: prevent memory leak on default theme recreation (#769)
• e275fb6 doc: Update README.md
• 0b71006 doc: Update README.md
• See full diff in compare view

Updates file-selector from 2.1.2 to 5.0.1

Release notes

Sourced from file-selector's releases.

v5.0.1

5.0.1 (2026-08-20)

Bug Fixes

• docs: pin waku to beta.8 to fix docs white-screen (db0b8d9)

v5.0.0

5.0.0 (2026-08-02)

• feat!: drop Node 20, upgrade jsdom to v30 (d5e212d)

BREAKING CHANGES

• minimum supported Node.js is now 22

v4.1.0

4.1.0 (2026-08-01)

Features

• add support to extract files from {clipboardData} (f5f4c5d)

v4.0.2

4.0.2 (2026-07-18)

Bug Fixes

• return the original dropped File so Electron can resolve its path (c7807be), closes electron/electron#33647

v4.0.1

4.0.1 (2026-07-17)

Bug Fixes

• fall back to getAsFile when getAsFileSystemHandle returns null (1287d34), closes react-dropzone/react-dropzone#1435

v4.0.0

4.0.0 (2026-07-12)

• feat!: move full MIME table to file-selector/mime subpath to shrink bundle (b778ca9)

... (truncated)

Commits

• d5e2d72 docs: add AGENTS.md for AI coding agents
• ebd8545 ci: add docs hydration smoke test + prod uptime monitor
• db0b8d9 fix(docs): pin waku to beta.8 to fix docs white-screen
• 784055f chore(deps): bump the minor group with 3 updates
• d8aa4e6 chore(deps): bump waku from 1.0.0-beta.8 to 1.0.0-beta.9 (#177)
• 48a0ed5 chore(deps): bump size-limit from 12.1.0 to 13.0.3
• e7dd463 chore(deps): bump oxlint-tsgolint from 0.24.0 to 7.0.2001
• aae2f56 chore(deps): bump the minor group across 1 directory with 3 updates
• 558dd4e chore(deps): bump the patch group with 2 updates (#172)
• 081d5d9 chore(deps): bump hono from 4.12.29 to 4.13.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for file-selector since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates immer from 11.1.8 to 11.1.21

Release notes

Sourced from immer's releases.

v11.1.21

11.1.21 (2026-10-02)

Bug Fixes

• throw on reads of a revoked Map or Set draft (#1298) (8848a5b)

v11.1.20

11.1.20 (2026-10-02)

Bug Fixes

• do not record a deletion when a base value is written back (#1295) (02e87e7)

v11.1.19

11.1.19 (2026-10-02)

Bug Fixes

• forward thisArg in the array-methods plugin (#1292) (1d88550)

v11.1.18

11.1.18 (2026-08-19)

Bug Fixes

• remove global var Iterator declaration conflicting with ESNext lib (#1290) (b00474e), closes #1273

v11.1.17

11.1.17 (2026-08-16)

Bug Fixes

• preserve structural sharing for no-op array-methods calls (0c3efdd)

v11.1.16

11.1.16 (2026-08-05)

Bug Fixes

• key inserted array indices by name in the array-methods plugin (e3df956)

v11.1.15

11.1.15 (2026-07-16)

... (truncated)

Commits

• 8848a5b fix: throw on reads of a revoked Map or Set draft (#1298)
• 02e87e7 fix: do not record a deletion when a base value is written back (#1295)
• beb5bc3 docs(zh-CN): update installation guide for current features (#1307)
• a808da8 chore(deps): bump joi from 17.13.4 to 17.13.7 in /website (#1301)
• d1f0749 chore(deps): bump browserslist from 4.16.3 to 4.28.8 in /website (#1294)
• f22db7f chore(deps): bump nanoid from 3.3.11 to 3.3.18 (#1296)
• 9876cd2 chore(deps): bump colord from 2.9.3 to 2.10.0 in /website (#1299)
• c0eaeab chore(deps): bump baseline-browser-mapping from 2.10.41 to 2.11.22 (#1303)
• 918b1e3 chore(test): cover circular symbol references in produce (#1309)
• 381654e chore(deps): bump svgo from 2.8.3 to 2.8.4 in /website (#1304)
• Additional commits viewable in compare view

Updates jsdom from 29.1.1 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

• Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
• Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
• Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
• Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
• Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
• Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
• Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
• Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
• Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
• Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
• Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
• Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
• Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
• Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

v30.1.1

• Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
• Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
• Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
• Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
• Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
• Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
• Fixed the storageQuota option being ignored by frames.
• Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
• Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
• Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
• Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
• Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

... (truncated)

Commits

• 058c0f5 30.1.3
• fcd1fd1 Cascade parsed longhands independently
• a3ee786 Cascade computed style properties on demand
• f42dc15 Resolve colors before caching or using currentcolor
• 074b1fb Compute background-position lengths against the final font size
• d19598c Apply style rules nested in multiple @​media rules
• 45d626c Rule out attribute selector subjects before matching
• 3ff0a5b Upgrade Undici and remove abort workarounds
• 8813bb1 Ignore CSS declarations with unparseable math functions
• 63712d8 Fix XHR credentials across redirects
• Additional commits viewable in compare view

Updates @types/jsdom from 28.0.3 to 30.0.0

Commits

• See full diff in compare view

Updates react from 19.2.7 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Han...

    Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.