chore(deps): bump the dependencies group across 1 directory with 117 updates

[dependabot]

Bumps the dependencies group with 116 updates in the / directory:

Package	From	To
next	16.2.6	16.3.4
react	19.2.1	19.3.0
@types/react	19.2.7	19.3.0
react-dom	19.2.1	19.3.0
@types/react-dom	19.2.3	19.3.0
@changesets/cli	2.29.8	3.0.2
@commitlint/cli	16.3.0	21.2.2
@commitlint/config-conventional	16.2.4	21.2.2
@eslint/compat	1.4.1	2.1.1
@eslint/eslintrc	3.3.3	3.3.7
@nx-tools/nx-container	6.9.1	7.3.0
@nx/devkit	22.1.3	23.2.1
@nx/eslint	22.1.3	23.2.1
@nx/eslint-plugin	22.1.3	23.2.1
@nx/jest	22.1.3	23.2.1
@nx/js	22.1.3	23.2.1
@nx/next	22.1.3	23.2.1
@nx/playwright	22.1.3	23.2.1
@nx/react	22.1.3	23.2.1
@nx/rollup	22.1.3	23.2.1
@nx/workspace	22.1.3	23.2.1
@playwright/test	1.58.2	1.63.0
@swc-node/register	1.11.1	1.12.1
@swc/cli	0.7.9	0.8.1
@swc/core	1.15.3	1.16.2
@swc/helpers	0.5.17	0.5.23
@testing-library/react	16.3.0	16.3.3
@testing-library/user-event	14.6.1	14.6.7
@types/node	18.19.14	26.5.1
@typescript-eslint/eslint-plugin	8.49.0	8.70.0
@typescript-eslint/parser	8.49.0	8.70.0
autoprefixer	10.4.21	10.5.6
babel-jest	30.2.0	30.5.1
eslint	9.30.1	10.10.0
eslint-config-next	16.2.6	16.3.4
eslint-config-prettier	10.1.5	10.1.8
eslint-plugin-playwright	2.2.0	2.11.0
eslint-plugin-react-hooks	7.0.1	7.1.1
jest	30.2.0	30.5.1
jest-environment-jsdom	30.2.0	30.5.1
nx	22.1.3	23.2.1
playwright	1.58.2	1.63.0
postcss	8.4.38	8.5.28
prettier	3.6.2	3.9.6
rimraf	6.1.2	6.1.3
rollup-plugin-preserve-directives	0.2.0	0.4.0
tailwindcss	3.4.3	4.3.3
ts-jest	29.4.6	29.4.12
typescript	5.9.3	7.0.2
typescript-eslint	8.49.0	8.70.0
axios	1.13.5	1.20.0
bignumber.js	9.3.1	11.1.5
@radix-ui/react-accordion	1.2.12	1.2.20
@radix-ui/react-avatar	1.1.11	1.2.6
@radix-ui/react-checkbox	1.3.3	1.3.11
@radix-ui/react-context-menu	2.2.16	2.3.7
@radix-ui/react-dialog	1.1.15	1.1.23
@radix-ui/react-dropdown-menu	2.1.16	2.1.24
@radix-ui/react-hover-card	1.1.15	1.1.23
@radix-ui/react-label	2.1.8	2.1.15
@radix-ui/react-navigation-menu	1.2.14	1.2.22
@radix-ui/react-popover	1.1.15	1.1.23
@radix-ui/react-progress	1.1.8	1.1.16
@radix-ui/react-radio-group	1.3.8	1.4.7
@radix-ui/react-scroll-area	1.2.10	1.2.18
@radix-ui/react-separator	1.1.8	1.1.15
@radix-ui/react-switch	1.2.6	1.3.7
@radix-ui/react-tabs	1.1.13	1.1.21
@radix-ui/react-tooltip	1.2.8	1.2.16
@react-spring/web	10.0.3	10.1.2
@tanstack/react-table	8.21.3	9.2.4
@tanstack/react-virtual	3.13.13	3.14.11
@visx/axis	3.12.0	4.0.0
@visx/brush	3.12.0	4.0.0
@visx/curve	3.12.0	4.0.0
@visx/event	3.12.0	4.0.0
@visx/glyph	3.12.0	4.0.0
@visx/gradient	3.12.0	4.0.0
@visx/grid	3.12.0	4.0.0
@visx/group	3.12.0	4.0.0
@visx/marker	3.12.0	4.0.0
@visx/pattern	3.12.0	4.0.0
@visx/react-spring	3.12.0	4.0.0
@visx/responsive	3.12.0	4.0.0
@visx/scale	3.12.0	4.0.0
@visx/shape	3.12.0	4.0.0
@visx/tooltip	3.12.0	4.0.0
@visx/xychart	3.12.0	4.0.0
motion	12.23.25	13.2.0
next-themes	0.2.1	0.4.6
react-dropzone	14.3.8	20.1.1
react-hook-form	7.68.0	7.87.0
react-idle-timer	5.7.2	5.7.3
react-number-format	5.4.4	5.4.5
react-qr-code	2.0.18	2.2.0
react-simple-maps	3.0.0	5.0.3
sonner	2.0.7	2.0.8
tailwind-merge	3.4.0	3.6.0
tailwind-scrollbar	2.1.0	4.0.2
use-local-storage-state	19.5.0	20.0.0
yup	0.32.11	1.7.1
swr	2.3.7	2.5.1
@carbon/icons-react	10.49.6	11.88.0
@types/carbon__icons-react	10.31.2	11.29.4
@vercel/otel	1.13.0	2.1.3
date-fns	2.30.0	4.4.0
react-globe.gl	2.34.0	2.38.0
react-intersection-observer	9.16.0	11.0.1
use-debounce	9.0.4	10.1.1
cmdk	0.2.1	1.1.1
jszip	3.10.1	3.10.2
react-resizable-panels	3.0.4	4.12.4
msw	2.10.4	2.15.0
@ledgerhq/hw-transport-web-ble	6.29.7	6.35.0
@ledgerhq/hw-transport-webhid	6.30.3	6.36.0
@siacentral/ledgerjs-sia	1.2.9	2.0.2

Updates next from 16.2.6 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653
• [16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @​lukesandberg in vercel/next.js#96655
• [16.x] [turbopack] Collapse nested promises in the analyzer by @​sampoder in vercel/next.js#96675
• [16.x] fix(next/image): preserve image response after optimization by @​styfle in vercel/next.js#96733
• [16.3.x] Default deploy e2e tests to the repo next version by @​eps1lon in vercel/next.js#96900
• [backport] Bump @​swc/helpers by @​mischnic in vercel/next.js#96885
• [backport] [turbopack] Raise registration calls in hoisted modules to the top by @​lukesandberg in vercel/next.js#97308
• [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @​lukesandberg in vercel/next.js#97302
• [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @​lukesandberg in vercel/next.js#97317
• [backport] Restore the live headers() view of the incoming request by @​unstubbable in vercel/next.js#97311

... (truncated)

Commits

• 299180d v16.3.4
• 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
• 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
• d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
• 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
• a9a1cb7 v16.3.3
• 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
• 3a15b4a [16.3.x] [next/image]: disable avif image optimization
• 7378b51 Backport/docs fixes 16.3 (#97649)
• Additional commits viewable in compare view

Updates react from 19.2.1 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.7 to 19.3.0

Commits

• See full diff in compare view

Updates react-dom from 19.2.1 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add ...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
explorer	Error		Sep 14, 2026 9:47am UTC
explorer-zen	Error		Sep 14, 2026 9:47am UTC
hostd	Error		Sep 14, 2026 9:47am UTC
indexd	Error		Sep 14, 2026 9:47am UTC
renterd	Error		Sep 14, 2026 9:47am UTC

[claude]

Claude Code Review

Claude Code Review is paused for this repository. To reconnect it, an admin of this repository's GitHub organization (or the account owner, for personal repositories) who can also manage your Claude organization's Code Review settings needs to re-link GitHub in Code Review settings. This is a one-time step.

_{Tip: disable this comment in your organization's Code Review settings.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: ced38b1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​carbon__icons-react@​10.31.2 ⏵ 11.29.4	-8		-45
	npm/​@​carbon/​icons-react@​10.49.6 ⏵ 11.88.0	-10			+2
	npm/​next@​16.2.6 ⏵ 16.3.4	-2	+75	+1
	npm/​jest-environment-jsdom@​30.2.0 ⏵ 30.5.1				+1
	npm/​@​radix-ui/​react-label@​2.1.8 ⏵ 2.1.15	+1		+1
	npm/​@​radix-ui/​react-separator@​1.1.8 ⏵ 1.1.15	+1		+1	-2
	npm/​@​radix-ui/​react-visually-hidden@​1.2.4 ⏵ 1.2.11	+1			-2
	npm/​eslint-config-next@​16.2.6 ⏵ 16.3.4	+1
	npm/​nx@​23.2.1
	npm/​@​radix-ui/​react-progress@​1.1.8 ⏵ 1.1.16	+1		+1	-2
	npm/​@​tanstack/​react-virtual@​3.13.13 ⏵ 3.14.11	+1		+3	+3
	npm/​@​radix-ui/​react-avatar@​1.1.11 ⏵ 1.2.6			+1	-2
	npm/​jest@​30.2.0 ⏵ 30.5.1			+1	-1
	npm/​@​visx/​group@​3.12.0 ⏵ 4.0.0	+1			+8
	npm/​@​radix-ui/​react-tabs@​1.1.13 ⏵ 1.1.21	+1		+1
	npm/​@​radix-ui/​react-hover-card@​1.1.15 ⏵ 1.1.23	+1
	npm/​@​radix-ui/​react-switch@​1.2.6 ⏵ 1.3.7	+1		+2
	npm/​jszip@​3.10.1 ⏵ 3.10.2	-11
	npm/​@​radix-ui/​react-checkbox@​1.3.3 ⏵ 1.3.11	+1		+1
	npm/​@​radix-ui/​react-dropdown-menu@​2.1.16 ⏵ 2.1.24	+1
	npm/​@​radix-ui/​react-popover@​1.1.15 ⏵ 1.1.23	+1
	npm/​@​radix-ui/​react-context-menu@​2.2.16 ⏵ 2.3.7	+1
	npm/​@​radix-ui/​react-dialog@​1.0.0 ⏵ 1.1.23			-3	-3
	npm/​@​radix-ui/​react-accordion@​1.2.12 ⏵ 1.2.20	+1		+1
	npm/​@​radix-ui/​react-radio-group@​1.3.8 ⏵ 1.4.7	+1		+1
	npm/​@​react-spring/​web@​10.0.3 ⏵ 10.1.2				-2
	npm/​@​typescript-eslint/​parser@​8.70.0
	npm/​@​radix-ui/​react-tooltip@​1.2.8 ⏵ 1.2.16			+1	+1
	npm/​@​nx/​playwright@​22.1.3 ⏵ 23.2.1			+2
	npm/​@​radix-ui/​react-scroll-area@​1.2.10 ⏵ 1.2.18	+1		+1
	npm/​@​swc/​helpers@​0.5.15 ⏵ 0.5.23	+1		+1
See 86 more rows in the dashboard

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @mswjs/interceptors is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: apps/renterd/package.json → npm/msw@2.15.0 → npm/@mswjs/interceptors@0.41.9 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@mswjs/interceptors@0.41.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: npm typescript License: LicenseRef-W3C-Community-Final-Specification-Agreement - The applicable license policy does not permit this license (5) (package/ThirdPartyNoticeText.txt) From: package.json → npm/@nx/eslint@23.2.1 → npm/typescript@6.0.3 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/typescript@6.0.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report